Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

Hacker News is featuring a launch post from OneCLI, a Y Combinator-backed startup offering an open-source, sandboxed agent harness for teams. The tool gives each employee a personal AI agent that never holds real credentials — secrets are injected at a gateway only after authorization, and policies are enforced outside the model at the network layer. Built by two cybersecurity founders, OneCLI runs each agent in an isolated VM and is fully self-hostable, so companies can verify the safety claims themselves. The pitch: agents that are powerful and secure, designed for teams, not just individuals.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton