diff --git a/src/bin/vibebox-supervisor.rs b/src/bin/vibebox-supervisor.rs
index 396c0ce..3aa9377 100644
--- a/src/bin/vibebox-supervisor.rs
+++ b/src/bin/vibebox-supervisor.rs
@@ -12,6 +12,11 @@ use tracing_subscriber::prelude::*;
 use vibebox::{config, instance, vm, vm_manager};
 
 fn main() -> Result<()> {
+    if env::var("VIBEBOX_INTERNAL").as_deref() != Ok("1") {
+        eprintln!("vibebox-supervisor is internal. Use `vibebox` instead.");
+        std::process::exit(2);
+    }
+
     init_tracing();
     color_eyre::install()?;
 
diff --git a/src/vm_manager.rs b/src/vm_manager.rs
index 1d0f479..24e5d3e 100644
--- a/src/vm_manager.rs
+++ b/src/vm_manager.rs
@@ -135,6 +135,7 @@ fn spawn_manager_process(
     if raw_args.len() > 1 {
         cmd.args(&raw_args[1..]);
     }
+    cmd.env("VIBEBOX_INTERNAL", "1");
     if !use_supervisor {
         cmd.env("VIBEBOX_VM_MANAGER", "1");
     }