Qwen Code

noneopen sourcecli

A Gemini CLI fork with the same posture: sandbox off by default, container-only isolation on Linux.

As a Gemini CLI fork it inherits the same model: commands run with your full privileges gated only by an approval prompt, sandboxing is opt-in, and on Linux the only isolation is container-based (Docker/Podman). macOS uses Seatbelt profiles.