Corral

A corral for unbroken horses. corral wraps Lima to give every project its own agent VM — real kernel boundary, persistent per-workspace memory, full dev toolchain inside, no host home or SSH agent visible. Optional HAProxy + pf egress filter restricts outbound HTTPS to a per-workspace allowlist. Rootless containerd ships in every VM. macOS, Apple Silicon or Intel.