Airut

Airut is a self-hosted, open-source platform designed to run Claude Code tasks triggered via email and Slack, providing a secure, isolated environment for each operation. The system enables users to initiate and manage code-related workflows—such as reviewing pull requests, merging changes, and deploying code—by simply sending messages through email or Slack. Each conversation or task is mapped to a dedicated workspace, where the relevant repository is cloned into an isolated container, and Claude Code operates directly within this environment.

A key aspect of Airut is its focus on defense-in-depth security. Each task is executed in a rootless Podman container with its own filesystem and process space, ensuring container isolation and automatic cleanup after completion. Network traffic from the container is tightly controlled through a transparent proxy that enforces per-repository allowlists at the path and method level, with custom DNS to prevent data exfiltration. Credential management is handled via surrogate credentials, with the proxy swapping surrogates for real values only on permitted hosts, and for AWS, re-signing SigV4 requests. Channel authentication is enforced through DMARC for email and workspace membership for Slack, with configurable authorization rules per repository.

Airut supports both interactive and scheduled workflows. Users can define cron schedules for automated tasks such as daily code reviews or health checks, with results delivered via email and the ability to continue conversations by replying. The platform also integrates with CI/CD pipelines: when Claude Code pushes a pull request, Airut ensures that build and test commands run inside the same sandboxed environment, protecting CI runners from potential exfiltration. The airut-sandbox CLI and a dedicated GitHub Action facilitate this sandboxing, and the system is compatible with any CI provider.

A built-in web dashboard allows monitoring of running and completed tasks, viewing network activity logs, and configuring repositories, channels, and credentials from the browser. Airut is installed on a user's own Linux server, keeping all code, conversations, and API keys within the user's infrastructure. The platform is MIT licensed and enforces 100% unit test coverage in CI, emphasizing both transparency and reliability for engineering teams seeking secure, autonomous code operations.