Show HN: Tilde.run – Agent Sandbox with Transactions and Version Control

Tilde.run has been released, designed to minimize the risks that arise when AI agents directly access real data. This tool treats every execution of an agent as a single transaction, providing a safe automation environment.

The key features are as follows:

• Version-controlled, composable file system: You can mount GitHub, AWS S3, Google Drive, and more into a single unified ~/sandbox directory. All files are version-controlled, and if you don't like the results of an agent's execution, you can instantly roll back with a single command.
• Isolated serverless sandbox: Each execution takes place in an isolated container. If the task succeeds, the changes are committed atomically; if it fails, no changes remain, eliminating the burden of infrastructure management.
• Network isolation and auditing: To prevent data leaks or unauthorized outbound calls, every outbound request is inspected against policy and logged.
• Agent-centric RBAC (Role-Based Access Control): It provides a simple DSL that lets you grant agents fine-grained permissions (read, write, approval-required, deny, etc.) on specific resources, rather than the user's full privileges.

Users can execute commands directly from the terminal via the CLI, or integrate it into agent workflows using the Python SDK.