I run my AI agents on isolated machines and didn't want to mount my filesystem or give them SSH keys. So I built a capability-based file access layer with scoped, time-bounded tokens and full auditing.
It’s written in Zig and uses Ed25519 + XChaCha20-Poly1305.
Happy to answer questions or hear criticism.