Add Brood Box to Supply Chain Security

[JAORMX]

Summary

Brood Box is a CLI tool by Stacklok that runs coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs. It provides defense against supply chain attacks by ensuring that AI coding agents execute in sandboxed environments, isolated from host credentials and network access.

Key security capabilities:

• Snapshot isolation — COW workspace snapshots prevent agents from making unreviewed changes to host files
• Egress control — DNS-aware network policies restrict what the agent can reach, preventing credential exfiltration
• MCP authorization profiles — Cedar-based policies control what MCP operations agents can perform (full-access, observe, safe-tools, or custom)

This addition is placed alphabetically (under "B") in the Supply Chain Security section, following the format specified in CONTRIBUTING.md.

🤖 Generated with Claude Code and Brood Box