From 9496f7f0f0d6d1adf80c9a8077ac485f0fca50d8 Mon Sep 17 00:00:00 2001 From: JY Tan Date: Thu, 15 Jan 2026 15:13:12 -0800 Subject: [PATCH] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 6de1f93..20386af 100644 --- a/README.md +++ b/README.md @@ -6,6 +6,8 @@ A Go implementation of process sandboxing with network and filesystem restrictio Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth. +You can also think of Fence as a permission manager for your CLI coding agents. + ## Features - **Network Isolation**: All network access blocked by default @@ -17,7 +19,7 @@ Fence wraps commands in a sandbox that blocks network access by default and rest - **HTTP/SOCKS5 Proxies**: Built-in filtering proxies for domain control - **Permission Import**: Using Claude Code? Import your Claude permissions as Fence configs with `fence import --claude -o ~/.fence.json` -You can use Fence as a Go package or CLI tool. +Fence can be used as a Go package or CLI tool. ## Documentation