







Experimental Linux microvm setup with a TypeScript Control Plane as Agent Sandbox
shuru - Local-first microVM sandbox for AI agents
Local-first microVM sandbox for AI agents on macOS, with experimental Linux ARM64 support

microsandbox - Every agent deserves its own machine
Run lightweight microVMs locally. Programmable networking, custom filesystems, secrets that never leak.
Introducing Deno Sandbox | Deno
Instant Linux microVMs with defense-in-depth security for running untrusted code.

smol-machines/smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.
A thousand ways to sandbox an agent
There are a thousand ways to sandbox an agent. Okay, I lied. There are three: simulated, containers, and microVMs. Here's when to use each.

pi/packages/agent/docs/harness-v2.md at harness-v2/j4 · earendil-works/pi
AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI - earendil-works/pi
perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
agentOS — A faster, lighter, cheaper alternative to sandboxes
A portable open-source operating system for agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, deploy anywhere.

Vercel Sandbox
Vercel Sandbox allows you to run arbitrary code in isolated, ephemeral Linux VMs.
OpenFang — The Agent Operating System
Open-source Agent OS built in Rust. 7 autonomous Hands. 16 security layers. 40 channels. 27 providers. Single binary. Battle-tested.