I've been working on something similar , policy guardrails for coding agents, with OPA backed policies and os-native sandbox - https://github.com/LuD1161/agentjail

If you want something much lighter, and focused around harness tool calls, check this out: https://crates.io/crates/coding-tools

Another example of why vibe coding is the worst advancement ever.