ci: setup github actions and update readme badges

Author: yanurag-dev

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 yanurag-dev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,10 +1,69 @@
-# sandforge
+# Sandforge 🛠️
 
-Portable sandbox architecture for running coding agents securely.
+[![Go Version](https://img.shields.io/github/go-mod/go-version/yanurag-dev/sandforge)](https://github.com/yanurag-dev/sandforge/blob/main/go.mod)
+[![CI](https://github.com/yanurag-dev/sandforge/actions/workflows/ci.yml/badge.svg)](https://github.com/yanurag-dev/sandforge/actions/workflows/ci.yml)
+[![License](https://img.shields.io/github/license/yanurag-dev/sandforge)](https://github.com/yanurag-dev/sandforge/blob/main/LICENSE)
+[![Issues](https://img.shields.io/github/issues/yanurag-dev/sandforge)](https://github.com/yanurag-dev/sandforge/issues)
+[![Pull Requests](https://img.shields.io/github/issues-pr/yanurag-dev/sandforge)](https://github.com/yanurag-dev/sandforge/pulls)
+[![Roadmap](https://img.shields.io/badge/Roadmap-Phase%201%20Complete-success)](ROADMAP.md)
 
-## Features
-- Strong isolation via VM boundaries (macOS/Linux).
-- Deny-by-default security policy.
-- Agent-agnostic tool contract.
+**Sandforge** is a portable, secure sandbox architecture designed to run AI coding agents (like Codex, Claude Code, and others) in a restricted environment. It protects the host machine from generated commands, third-party tools, and untrusted repository code by enforcing a "Control Plane Outside, Execution Inside" principle.
 
-See [ARCHITECTURE.md](ARCHITECTURE.md) and [GEMINI.md](GEMINI.md) for details.
+## 🌟 Key Features
+
+- **Host Isolation**: Uses Apple Virtualization Framework (macOS) and KVM (Linux) to create a strong VM boundary.
+- **Task Isolation**: Per-task rootless containers inside the Linux worker guest.
+- **Security First**: "Deny-by-Default" policy for filesystem, network, and resource access.
+- **Agent Agnostic**: Provides a common tool contract for any LLM-based agent.
+- **Performance**: Optimized for fast boot times and minimal resource overhead.
+
+## 🏗️ Architecture
+
+```mermaid
+flowchart LR
+    U[User / CLI] --> A[Agent Adapter]
+    A --> CP[Control Plane]
+    CP --> PE[Policy Engine]
+    CP --> SS[Sandbox Supervisor]
+    SS --> BD[Backend Driver]
+    BD --> WK[Isolated Linux Worker]
+    WK --> TR[Task Runtime]
+```
+
+See [ARCHITECTURE.md](ARCHITECTURE.md) for the full technical design.
+
+## 🗺️ Roadmap Status
+
+We are currently at the end of **Phase 1**.
+
+- [x] **Phase 1: Foundation & Policy** — Core security logic and "Deny-by-Default" engine.
+- [ ] **Phase 2: Orchestration & Mocking** — Lifecycle management and state machine.
+- [ ] **Phase 3: macOS Execution Plane (macos-vz)** — Real VM booting on Apple Silicon.
+- [ ] **Phase 4: Linux Execution Plane (linux-kvm)** — Native Linux isolation.
+- [ ] **Phase 5: Task Runtime** — Containerization inside the worker.
+
+Full details in [ROADMAP.md](ROADMAP.md).
+
+## 🛠️ Getting Started
+
+### Prerequisites
+- Go 1.25+
+- macOS (Apple Silicon recommended) or Linux (KVM support)
+
+### Development Commands
+```bash
+# Initialize dependencies
+go mod tidy
+
+# Run tests (Policy Engine)
+go test -v ./internal/policy/...
+
+# Build the CLI
+go build -o sandforge ./cmd/sandforge
+```
+
+## 🤝 Contributing
+Contributions are welcome! Please check the [ROADMAP.md](ROADMAP.md) for tasks in progress. Since we are in early development, please open an issue before starting major architectural changes.
+
+## 📄 License
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details (TODO: Add LICENSE file).