Deploy Agents.
Without the Fear.
StuntDouble is the ultimate Zero-Trust Isolation Engine. We wrap autonomous coding agents like Claude Code and Copilot in restricted containers with dropped capabilities, resource limits, zero-copy rewinds, and native macOS & Windows kernel interceptors.
CLI Reference Manual
Master the StuntDouble ecosystem with our zero-trust orchestration commands.
sd run <agent>
Spawns an agent inside a capability-dropped container with scoped workspace mounts.
- --allow-unenforced-network : Acknowledge egress state
- --env (-e) : Inject custom runtime base image
sd rewind
Restores tracked workspace files to the pre-run snapshot using zero-copy git plumbing and removes untracked agent artifacts.
sd swarm <agents...>
Orchestrates multiple AI agents inside an isolated Docker bridge network (StuntNet) with synthetic internal service communication.
sd record <command>
Runs target commands under a Keploy sidecar to capture outbound database and API traffic into replayable mock definitions.