oops

A command-line safety layer in Rust: `oops run` executes any command inside a lightweight copy-on-write filesystem sandbox, `oops diff` shows what it created, modified or deleted, and `oops undo` or `oops commit` decides whether it ever touches your files — so a coding agent can run at full speed without permission-prompt fatigue.

Two backends with honestly different guarantees: on Linux, rootless OverlayFS inside a nested user namespace the wrapped command cannot dismantle ("it never happened"); on macOS, APFS clonefile snapshot-and-restore ("it can always be put back"), with O(1) undo on both. On any other platform it refuses to run rather than run unsandboxed. `oops diff --porcelain` is a stable, byte-order-sorted interface for scripts and agents. Published on crates.io as oops-sh.