Leash"A cross-platform package manager where you control the permissions. Design doc — seeking contributors."

Leash

You control the length. One system, any platform.

A cross-platform (Linux + Windows) package manager where the user is the security policy author, not the packager. Apps start with zero permissions. When they need something, a local LLM reads the actual code and explains it in plain English. You grant or deny, with conditions. An admin sets a hard ceiling.

Status: Design complete. Seeking technical co-lead and initial contributors.

The problem

Every current package manager (Flatpak, Snap, .deb, MSI) has the same flaw: the packager decides your security policy, not you. 41.7% of Flatpak apps have policies broad enough to defeat their own sandbox.¹

The fix

• Install from Git. Builds against system libraries. Feels like apt install.
• Zero-permission sandbox start. Allowlist-only. Daemon-mediated.
• Plain-English permission prompts, generated by a local 3–7B LLM.
• Conditional grants: If / When / Until. Max 3 options per prompt.
• Admin ceiling. Hard constraint. User can't override.
• Comment-code consistency checker. Every install is a passive audit.
• One codebase, two thin platform adapters. No forks.

Read the design

DESIGN.md — 26 pages. Architecture, threat model, roadmap, funding strategy, open questions.

What we're looking for

A technical co-lead (Rust/C++, kernel-adjacent: seccomp, Landlock, eBPF, bubblewrap, AppContainer) and a small team. The implementation is all known technology. The design is the new part.

See CONTRIBUTING.md for how to get involved.

---

¹ Dunlap, T., et al. "A Study of Application Sandbox Policies in Linux." SACMAT '22, 2022.