Show HN: Agentshield Zero-leak kernel sandbox and secret defense for AI coding

AgentShield v1.2.0 wraps AI coding agent processes (Claude Code, Cursor, Windsurf, Codex, Antigravity) in OS-level kernel sandboxes, using Bubblewrap plus Landlock on Linux, Seatbelt on macOS, and AppContainer on Windows to trap unauthorized syscalls and block credential exfiltration via CIDR egress filtering. It also redacts environment secrets in memory, offers a Ctrl+. QuickFix redactor for exposed keys, and prevents agents from reading /proc/self/environ or ~/.ssh. A Pro tier adds a macOS/Windows menu-bar GUI, cloud audit log backup, and centralized policy sync.