I've been working on something similar , policy guardrails for coding agents, with OPA backed policies and os-native sandbox - https://github.com/LuD1161/agentjail