Great tool. Yours is much more sophisticated than mine, but I also came up with a similar solution to my personal problem of running opencode web in a container with access to all my API keys. I also settled on mitmproxy. Before I was trying to use IPTables, but that didnt really safely work, because the agent could still escape if he tried hard enough. I'm happy there is some work being done of securing agents more properly. Maybe this helps broader adoption for experiments with access to more services.

https://github.com/joostme/doubleagent