Hurricane AIHurricaneAI
← Back to products
Leash logo
Product overview

Leash

Per-user egress and action enforcement for local AI agents

Preview

Our mission

Put every local AI agent on a leash you control

We're building Leash so anyone can give a local AI agent real, enforced boundaries — not promises the agent might keep, but limits the machine holds it to. You run the agent as its own system user account, and Leash decides what that user can reach and do.

Because enforcement lives at the user account in the operating system, the agent can't talk its way around it, reroute, or quietly start a helper to do the forbidden thing. Where it can go, what it can touch, what it can run — you decide, and the machine enforces.

Plain English

What Leash does

Leash gives a local AI agent its own user account on the machine and enforces, at that account, where it can go and what it can do. The agent runs as that system user, and Leash decides — for that user — which network destinations, files, commands, and tools it's allowed, and blocks anything outside those bounds.

  • The agent runs under a dedicated system user; Leash enforces against that user's account (UID).
  • Per-user allow/deny lists for network destinations, directories, commands, and tools — follow a whitelist (only approved) or a blacklist (everything but).
  • A blocked action gets a hard error — the connection is cut, or the open/exec is denied — because the rules live in the operating system, not inside the agent, so it can't route around them.
  • Linux-only v1 preview; the 'stop and ask a human' approval step comes later with Sentinel.

Install

Installs from source on a Linux host (needs python3.12 and sudo).

curl -fsSL https://ai.hurricaneindustries.co/api/products/leash/artifact -o leash.tgz
mkdir -p leash && tar -xzf leash.tgz -C leash
cd leash && sudo bash install.sh

Operational summary

Visibility
public
Downloads
Available
Latest release
v1
Working version
v1

Living documents

Browse history
README

Leash

v1

leash/README.md

Updated Jun 29, 2026, 6:22 AM UTCNo commit recorded
Open history
PLAINENGLISH

Leash in Plain English

v1

leash/PLAINENGLISH.md

Updated Jun 29, 2026, 6:22 AM UTCNo commit recorded
Open history
HOWITWORKS

How Leash Works

v1

leash/HOWITWORKS.md

Updated Jun 29, 2026, 6:22 AM UTCNo commit recorded
Open history