Preview. These maps are our reading of public sources and haven't been checked with the projects' maintainers yet.
pi pod
Self-hosted server that runs pi coding-agent sessions in isolated sandboxes ('pods'), driven from a CLI or iOS/Android apps, with templates that scope each pod's secrets and allowed hosts.
pipod.dev/Active
Repo created 2026-10-01; v0.1.19 released 2026-10-13; pushed 2026-10-15. (checked 2026-10-25)
In Agent guardrails
Where it stands apart
- How is the main thing licensed? copyleft or source-available with restrictions (10% of 21 others)
- How is it mainly sustained? company or startup with a free product (no revenue yet) (10% of 20 others)
- What mainly decides whether an action is allowed? no per-action decision: it isolates, inventories, or records (24% of 21 others)
- Which agents does it work with? one specific agent (19% of 21 others)
- In the default setup, where does the agent's work actually execute? in a remote or cloud sandbox (10% of 21 others)
What it shares with most of the community
- Is it actively maintained? active (81% of 21 others)
- Can it run entirely on your own device or infrastructure, without the maker's servers? yes (76% of 21 others)
- Do you need an account to use it? no account (67% of 21 others)
- Who is it for? developers (90% of 21 others)
- If the guard itself breaks, is missing, or cannot decide, what happens by default? fails closed: the action does not run (71% of 17 others)
- What is the main thing it protects? the developer's machine and files (52% of 21 others)
- Is enforcement kept out of the agent's reach? yes, enforced in code or infrastructure the agent cannot change (95% of 21 others)
Not documented
The public sources we read don't say:
- Does it control the agent's outbound network access?
Nearest neighbors
- E2B 69% of 16 shared answers match
- Airlock 63% of 16 shared answers match
- Drop 63% of 16 shared answers match
Every answer
| Question | Answer | Source |
|---|---|---|
| Is it actively maintained? | active | source 2026-10-25 |
| How is the main thing licensed? | stands apart copyleft or source-available with restrictions AGPL-3.0 | source 2026-10-25 |
| How is it mainly sustained? | stands apart company or startup with a free product (no revenue yet) Copyright Billzo, LLC; self-host free (AGPL); hosted paid plans announced but not yet available. | source 2026-10-26 |
| Can it run entirely on your own device or infrastructure, without the maker's servers? | yes | source 2026-10-25 |
| Do you need an account to use it? | no account Self-hosted: you add your own users on your server; no maker account. Hosted service not yet available. | source 2026-10-26 |
| Who is it for? | developers | source 2026-10-25 |
| Which shared standard or format does it mainly build on? | none of these (its own format or interface) Own pod server for one agent. | source 2026-10-26 |
| Where does it mainly step in? | at the OS or VM boundary (sandbox, container, syscall supervisor) | source 2026-10-25 |
| What mainly decides whether an action is allowed? | stands apart no per-action decision: it isolates, inventories, or records Templates scope secrets and egress in advance; no per-action gate. | source 2026-10-25 |
| If the guard itself breaks, is missing, or cannot decide, what happens by default? | fails closed: the action does not run Sessions only run inside pods. | source 2026-10-25 |
| Which agents does it work with? | stands apart one specific agent pi only. | source 2026-10-25 |
| In the default setup, where does the agent's work actually execute? | stands apart in a remote or cloud sandbox Pods run on a server you operate (or later a hosted one), not on the developer's laptop. | source 2026-10-25 |
| What is the main thing it protects? | the developer's machine and files | source 2026-10-25 |
| Does it keep a record of agent actions? | no, or not a focus | source 2026-10-25 |
| Does it control the agent's outbound network access? | Not documented Templates carry an egress setting / allowed hosts; default not stated. | source 2026-10-25 |
| What is it mainly for? | letting agents run with fewer approvals, safely | source 2026-10-25 |
| Is enforcement kept out of the agent's reach? | yes, enforced in code or infrastructure the agent cannot change Docs warn template instructions 'enforce nothing: a pod can do whatever its secrets and egress allow'. | source 2026-10-25 |
Sources
This page was derived from:
- GitHub · github.com/pi-pod/pipod · read 2026-10-25
- GitHub · github.com/pi-pod/pipod/blob/main/docs/self-host.md · read 2026-10-25
- Web page · pipod.dev/ · read 2026-10-25
Are you a maintainer? Claiming and correcting projects is coming soon.