Bromure Agentic Coding 2.0.0 is our biggest release yet — and the headline is Guardrails.

An isolated VM keeps a poisoned package away from your laptop. But the agent itself still has real reach: it can talk to your database, your cluster, your registry. A confident agent — or a prompt-injected one — is one DROP TABLE or one kubectl delete pod away from a very bad afternoon. Guardrails close that gap.

New

Guardrails — destructive actions, blocked at the wire. Bromure already brokers your credentials at the protocol level. Now it inspects what those requests actually do. A SQL DROP or TRUNCATE, a kubectl delete pod, an AWS service teardown, a push to your Docker registry — Guardrails recognize the operation in the protocol itself and stop it before it leaves the VM. No brittle shell-command parsing, no relying on the agent to behave. The destructive call simply never reaches the resource. You decide what's allowed; everything else is denied by default.
Grok support. Grok joins Claude Code and Codex as a first-class agent inside the VM. Same isolation, same credential brokering, same Guardrails.
File explorer — drag files in and out of the VM. A built-in file explorer lets you drag and drop files into the VM and back out to your laptop. No scp, no shared-folder fiddling — just grab a file and move it.

Improvements

Live credential changes. Add, remove, or rotate a credential without restarting the VM. Changes take effect immediately at the proxy — the agent keeps running.
More datastores brokered. Guardrails and credential brokering now cover ClickHouse, MongoDB, and Elasticsearch alongside the existing targets.
Fixed the "soft reboot" double reboot. A soft reboot now reboots once, as it should.
Native fonts in the guest. Bromure copies Terminal.app's fonts into the VM, so your terminal looks the same inside the box as it does outside.

Bromure Agentic Coding is free and open source. Grab 2.0.0 on the downloads page, or learn more on the Agentic Coding page →.