Local microVMs and harness SDKs that contain agent blast radius

brig-sh / NOFire AI

Go CLI and session daemon that boots coding agents inside local microVMs with project mounts, credential delivery, and image verification.

Use caseUse it to run a coding agent on one project directory so a bad command cannot touch the rest of the host.

cloudflare

SDK for persistent stateful agents on Durable Objects with MCP, workflows, voice, browser agents, code mode, and sandboxed execution.

Use caseUse it to deploy always-on edge agents that keep state, schedule work, and call tools without a separate control plane.

risa-labs-inc

Native multi-threaded JVM operator console (not Electron) that hosts coding agents with real browser, terminal, editor, secrets, and 100-plus MCP tools.

Use caseUse it as a desktop control plane to supervise multiple agent sessions with hot-reload plugins and RBAC.

hetpatel-11

Rust runtime that opens real coding harnesses in a PTY, owns chrome around them, and hops a live session between Claude Code, Codex, OpenCode, Pi, and Grok.

Use caseUse it to move an in-progress coding thread to another harness without restarting or losing local session search.

agentkitai

Tamper-evident hash-chained audit logs for AI agents with OTel-native ingestion and cryptographically verifiable export snapshots.

Use caseUse it to prove every LLM call, tool call, and approval in a chain that fails verification if any record is altered.

Human-Agent-Society

Evaluation infrastructure for self-evolving agents on the Harbor task standard, measuring whether memory, skills, or harness changes improve scores.

Use caseUse it to score autoresearch and containerized tasks before and after an agent persists learned state.

jiangxinke

Black-box RL stack for training language agents inside multi-agent harnesses with action-args decoupling and conflict-aware policy optimization.

Use caseUse it to train central or joint multi-agent policies without flattening whole trajectories into one token sequence.

JordanMcCann

Memory operating system for agents with knowledge graph, consolidation pipeline, and leading LongMemEval retrieval scores.

Use caseUse it to give long-horizon agents durable multi-session recall, updates, and preference tracking under real retrieval.

tsilva

CLI that launches Claude Code or Codex with full autonomy inside an isolated Docker container while host credentials and sensitive paths stay outside.

Use caseUse it to run yolo-mode agent sessions on a trusted project without permission prompts or host leakage.

mattolson

Local locked-down sandbox with minimal filesystem access, sidecar egress proxy for hostname policies, and secret injection so the agent never sees raw keys.

Use caseUse it to run coding agents under network allowlists and secret proxies from CLI or devcontainers.

siyad01

Go sandboxed runtime with zero-trust permission manifests, gVisor isolation, credential vault, immutable audit log, and kill switch.

Use caseUse it to declare exactly what an agent may touch and auto-kill on limit breach for untrusted code.

0xferrous

Sandboxed containers for coding agents with disposable Git or Jujutsu workspaces and optional Portal host capability mediation.

Use caseUse it to spin Nix-reproducible agent images that discard worktrees after a run.

breakcafe

Serverless-first Claude agent runtime forked for request-driven HTTP with persistent memory, scheduled tasks, and MCP on Lambda-style platforms.

Use caseUse it to host stateful agent conversations and skills as per-request containers without an always-on orchestrator.