Product overview

Leash

Per-agent egress and action enforcement for local AI agents

Preview

Our mission

Put every local AI agent on a leash you control

We're building Leash so anyone can give a local AI agent real, enforced boundaries — not promises the agent might keep, but limits the machine holds it to. You run the agent as its own system user account, and Leash decides what that user can reach and do.

Because enforcement lives at the user account in the operating system, the agent can't talk its way around it, reroute, or quietly start a helper to do the forbidden thing. Where it can go, what it can touch, what it can run — you decide, and the machine enforces.

Plain English

What Leash does

Leash gives a local AI agent its own user account on the machine and enforces, at that account, where it can go and what it can do. The agent runs as that system user, and Leash decides — for that user — which network destinations, files, commands, and tools it's allowed, and blocks anything outside those bounds.

The agent runs under a dedicated system user; Leash enforces against that user's account (UID).
Per-user allow/deny lists for network destinations, directories, commands, and tools — follow a whitelist (only approved) or a blacklist (everything but).
A blocked action gets a hard error — the connection is cut, or the open/exec is denied — because the rules live in the operating system, not inside the agent, so it can't route around them.
Linux-only v1 preview; the 'stop and ask a human' approval step comes later with Sentinel.

Install

One command on a Linux host (needs python3.12 and sudo). It downloads leash, checks it against the SHA-256 published here, and only then runs the installer.

curl -fsSL https://ai.hurricaneindustries.co/api/products/leash/install.sh | sudo bash

Or download it first

Same result, if you would rather read the source before running it. The second line is the integrity check the one-command install does for you.

curl -fsSL https://ai.hurricaneindustries.co/api/products/leash/artifact -o leash-v1.tar.gz
curl -fsSL https://ai.hurricaneindustries.co/api/products/leash/artifact.sha256 | sha256sum -c -
mkdir -p leash && tar -xzf leash-v1.tar.gz -C leash
cd leash && sudo bash install.sh

Operational summary

Visibility

public

Downloads

Available

Latest release

v1.1

Working version

—

Living documents

Browse history

README

Leash

leash/README.md

Updated Oct 18, 2026, 8:50 AM UTCNo commit recorded

Open history

PLAINENGLISH

Leash in Plain English

leash/PLAINENGLISH.md

Updated Oct 18, 2026, 8:50 AM UTCNo commit recorded

Open history

forthebots

Leash — For the Bots

leash/forthebots.md

Updated Oct 15, 2026, 6:59 AM UTCNo commit recorded

Open history

HOWITWORKS

How Leash Works

leash/HOWITWORKS.md

Updated Oct 15, 2026, 6:59 AM UTCNo commit recorded

Open history