







Sprites are full Linux computers designed for agents instead of people. As persistent or disposable as you want, with full environment checkpointing and restore.
Sprites - Stateful sandboxes
Persistent, hardware-isolated execution environments for arbitrary code. Run AI agents, untrusted code, and more in secure sandbox environments with checkpoint & restore.
agentOS — A faster, lighter, cheaper alternative to sandboxes
A portable open-source operating system for agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, deploy anywhere.

smol-machines/smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.
agentOS - Everything Agents Need to Run and Operate - Rivet
The complete platform for production AI agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, one platform, deploy anywhere.

Where Should the Agent(s) Live? – OpenComputer
Isolation models, agent placement tradeoffs, credential design, and sandbox lifecycle patterns for agentic systems.

Composable, fast, and secure dev environments | Workshop | Ubuntu
Launch agent-ready, sandboxed development environments with a single command. Define them via simple YAML configs, share them to recreate on different machines.

Computers for agents
Sandboxes aren't enough. Give your agent a real computer and get back to building.

perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.

OpenFang — The Agent Operating System
Open-source Agent OS built in Rust. 7 autonomous Hands. 16 security layers. 40 channels. 27 providers. Single binary. Battle-tested.
Cua: Scale computer fleets for computer-use agents
Scale Linux, Windows, macOS, and Android computer fleets for computer-use agents with one open-source MCP/CLI driver.

AgentBox · Free In-Browser AI Agent OS | Strukto
A free, privacy-first in-browser AI agent OS that connects to Google Drive, Dropbox, Slack, GitHub, etc. No server-side data storage.

Ephemeral-AI-Lab/layerfs
LayerFS gives every agent an isolated, disposable filesystem fork without copying the shared base. Useful states become durable, deduplicated checkpoints with workspace-scoped tool history—ready to branch, rewind, or reuse across parallel development, environment experiments, and MCTS-style rollouts.
The Heart of Spritely: Distributed Objects and Capability Security
This paper is the second in a three-part series outlining Spritely's thinking and design. The first paper, Spritely: New Foundations for Networked Communities, explains the problems which face contemporary social network design. This paper details the core technical toolbox provided by Spritely Goblins and how it supplies the necessary features to feasibly build out Spritely's broader vision. The third paper in the series, Spritely for Secure Applications and Communities, ties the first two papers together by showing how the architecture for user-facing software fulfills the vision of the first paper and can be built on top of ideas from this paper.
Agent Plugins
A portable package format for reusable components that extend AI agents.
