Compare
Forkbench vs Sculptor
Sculptor (by Imbue) runs each AI coding agent in its own Docker container for strong execution isolation, aimed at safely running agent-written code.
Updated
Sculptor puts each agent in a Docker container, which is the stronger isolation for genuinely untrusted code. Forkbench draws the line around what a job can reach instead: a Thread holds its folder, notes, keys and board, folders are enforced by the macOS kernel, and a key goes to the command rather than the agent.
Sculptor and Forkbench both run multiple coding agents in parallel, but they draw the isolation line in different places. Sculptor puts each agent in its own Docker container, stronger execution isolation, which is the right call when you need to run genuinely untrusted code. Forkbench is a lighter, native-macOS control room that isolates files and branches with one-click git worktrees and adds a coordination + secrets layer, without requiring Docker.
| Forkbench | Sculptor | |
|---|---|---|
| Isolation | Git worktrees (files / branches) | Docker container per agent (execution) |
| Requires Docker | No | Yes |
| Untrusted-code safety | Not for untrusted execution | Strong (containers) |
| Agent support | Agent-agnostic (any CLI) | Claude-centric |
| Secrets handling | Vault (Pro), sealed on your Mac | No secrets handling |
| Shared task board + remote | Yes (Pro) | No |
| Platform | Native macOS | Desktop (Mac / Linux), Docker-based |
Where Sculptor is strong
- Container-per-agent: genuinely isolates code execution, not just files, which is the safer choice for untrusted code.
- Well-funded (Imbue) and actively developed.
- A good fit when you want agents fully sandboxed from your host.
Where Forkbench differs
- A key you put in Vault reaches the command that needs it, never the agent. Vault is part of Pro.
- Folders the macOS kernel enforces. A Thread can be locked to the folders the job is about, applied as each shell starts and inherited by every process it spawns, so an agent cannot read or write outside them. Builds still run and the network is untouched.
- Any terminal can be sealed off from its Thread too, so that pane's agent gets no board, no Notebooks and no Vault, a second isolation line that runs alongside worktrees rather than replacing Sculptor's containers.
- No Docker required: one-click git worktrees are lighter than spinning up containers for everyday, trusted agent work.
- Agent-agnostic and native macOS: run Claude Code, Codex, Gemini, Aider side by side in a real terminal.
- A shared task board and end-to-end encrypted Notebooks, plus multi-Mac and phone/web remote: the coordination layer Sculptor doesn't center on.
- We're honest about the limit: for untrusted code, containers isolate execution better than worktrees, if that's your need, Sculptor is the right tool.
The bottom line
If you need to run untrusted or risky agent-written code and want each agent fully sandboxed, Sculptor's containers are the safer isolation. If you're running agents you trust and want a lighter native-Mac control room, one-click worktrees, a shared board, and a vault that keeps your keys away from the agents, Forkbench is the better fit.
Sculptor questions
Which one is safer?
They answer different questions. For running code you do not trust, Sculptor: a container isolates execution and a git worktree does not. For keeping a credential out of an agent's reach, Forkbench, because a key in Vault goes to the command and the agent gets only the result.
Do I need Docker for Forkbench?
No. Threads use one-click git worktrees plus a folder lock the macOS kernel applies as each shell starts and every child process inherits, so there is nothing to build or start before an agent can work. Builds still run and the network is untouched.
Can I cut a single pane off from everything?
Yes. Any terminal can be sealed off from its Thread, so that pane's agent gets no board, no notes and no keys while its shell keeps working. It is a second line alongside worktrees rather than a replacement for Sculptor's containers.
Keep reading
Sources
Comparison based on publicly available information, checked on the date above. Spot something out of date? Tell us.