A free town of locked rooms for your AI. Every door says what the room can touch. A guard checks every request. Every try is written down.
You use AI to build things. You're about to let it touch your files. You want to see what it can reach before it reaches.
Free. Nothing to download yet. Follow the build.
Every room in SandboxVille is a separate, locked sandbox. Nothing it can touch is a secret and nothing it can't touch is negotiable.
Every room posts what it can touch, in plain language, right on its door.
A capability broker grants only what the door declares. Nothing more gets through.
Every attempt is recorded: room, action, and whether it was allowed or refused.
They run today on our own test machine, each in its own sandbox. Public release comes after an outside security review.
A terrarium where a real FlyWire feeding circuit decides when the fly eats. Its walking is a simple rule, for now. New species evolve while the jar is open, and the jar keeps their family tree.
Your watchlist and paper trades on the wall, forecasts graded in the open.
Read-only access to a folder you pick, shelved and searchable.
A room built to be broken into. It goes after the network, storage, and the broker itself. Every attempt is watched, logged, and refused, in plain sight.
A second test room that goes after file access: path tricks, device names, a real junction escape, write attempts. Every one is refused and logged.
A planned room where you talk with Cogito, a character built on a human brain-wiring model.
Also on the floor plan, not built yet: the Map Room, the Mailroom, and the Workshop.
In our own test suites, 51 of 51 break-in attempts were blocked: 27 against the network, storage, and the broker, and 24 against file access. Each suite also checks that the one thing its room is allowed to do still works, so the locks are real and not just broken. Every room runs in its own sandbox, and the tests check that one room cannot pose as another or reach its data.
SUITE 1 · NETWORK, STORAGE, BROKER · 27 / 27
SUITE 2 · FILE ACCESS · 24 / 24
51 / 51 BLOCKED IN OUR OWN TESTS · EVERY ATTEMPT LOGGED · OUTSIDE REVIEW BEFORE LAUNCH
From our test log · Sept 2026
Real refusals from the broker's audit log in our own test run, reworded into plain English.
SandboxVille is a 3D building you walk through in first person, or view from above as a floor plan. Walk up to a door, read what the room can touch, and step in.
Every room is a plain package: a room.json that declares its door, checked by a validator that refuses a bad or sneaky room before it ever runs. An in-app build mode for adding your own rooms is on the roadmap. It is not in the app yet.
Is SandboxVille part of Anthropic or the Model Context Protocol project?
No. SandboxVille is an independent project. We are not affiliated with, endorsed by, or a part of Anthropic or the Model Context Protocol project.
Is "51 / 51 blocked" an independent audit?
No. That is our own test suite, run and logged by us, and we say "in our own tests" every time for exactly that reason. An outside security review happens before public launch.
Can I download SandboxVille right now?
Not yet. Nothing here runs on your machine today. Join the Discord to follow the build, room by room, and we'll say so the moment anything ships.
Does the jar really run a fruit fly's brain?
Partly, and we're exact about which part. A real FlyWire feeding circuit decides when the fly eats. Its walking is a simple rule, for now.
Does The Desk trade with real money?
No. It's paper trades only, graded in the open, and there is no buy button in the room. Nothing here is financial advice.
What do I get for the $9 guide?
The door-label method: how we write down exactly what an AI setup can touch, in plain English, so you can do the same for your own.
Public launch comes after an outside security review. Join the Discord to follow the build, room by room.
Follow for updates instead. No account needed here, no spam, just the build.
These are live today. New agent channels get added here as they launch.