ShrekOS design uses disposable sandboxes to isolate untrusted agents by default

ShrekOS is a security-focused operating system design where untrusted workloads run inside isolated environments called Benches, which start with no file access and no network connectivity. Capabilities such as folder access or network egress are granted one at a time, narrowly scoped, and can be revoked at any time. Network egress is restricted to sealed, pre-approved destinations rather than open internet access, and a Bench is never permitted to hold both a secret credential and network access simultaneously. Credentialed API calls are instead routed through an external broker that holds the token, makes the call, and returns only the result to the Bench. When a job completes, the Bench is discarded while any output files are retained, keeping the host protected from lingering tooling or state.