







Purpose built Linux OS for agents—isolating agent execution in secure sandboxes with cryptographic attestation and compliance-ready audit trails for enterprise deployment.
agentOS — A faster, lighter, cheaper alternative to sandboxes
A portable open-source operating system for agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, deploy anywhere.

perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
perplexityai/SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
OpenFang — The Agent Operating System
Open-source Agent OS built in Rust. 7 autonomous Hands. 16 security layers. 40 channels. 27 providers. Single binary. Battle-tested.
Composable, fast, and secure dev environments | Workshop | Ubuntu
Launch agent-ready, sandboxed development environments with a single command. Define them via simple YAML configs, share them to recreate on different machines.

smol-machines/smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.
Sprites - Stateful sandboxes
Persistent, hardware-isolated execution environments for arbitrary code. Run AI agents, untrusted code, and more in secure sandbox environments with checkpoint & restore.
Where Should the Agent(s) Live? – OpenComputer
Isolation models, agent placement tradeoffs, credential design, and sandbox lifecycle patterns for agentic systems.

Introducing eve
Introducing eve, the open-source agent framework from Vercel for building, running, and scaling agents in production, with durable execution, sandboxed compute, approvals, channels, tracing, and evals built in.

agentOS - Everything Agents Need to Run and Operate - Rivet
The complete platform for production AI agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, one platform, deploy anywhere.

Is sandboxing sufficient to contain rogue agents?
Quick caveats: this is a post on AI safety, written by a cryptography professor. If that troubles you, you should read something else. I try hard not to work on AI (except when the topic occasional…

CrabTrap: Secure Agents in Production
CrabTrap is an LLM-as-a-judge HTTP proxy to secure agents in production. It intercepts and audits AI agent requests in real time. Try it on GitHub now.
Under the hood: Security architecture of GitHub Agentic Workflows
Learn how our threat model and security architecture help teams run agents safely in GitHub Actions.

trace-spec/ROADMAP.md at 738358dfac58047eaf689ca824f9e15008aabf36 · agentrust-io/trace-spec
TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance. - agentrust-io/trace-spec
Claw Patrol: an open-source security firewall for agents | Deno
Why we needed an agent firewall that speaks more than HTTP.


Codex OS is now Mutable OS! | Mutable OS
asterinas/asterinas

unikernels were hard. key word: were.

The Lightbulb Computer — Reimagining Spatial & Ambient Computing with Projectors

What Even Is An OS Now?
so that new Mac Studio and M5 Ultra have me thinking about 2030 now the wildcard on the $1200ish 2030 Mac Mini is RAM. who knows what the…