Self-hosted isolation layers that outrun managed agent loops

eugene1g

macOS sandbox-exec wrapper that applies deny-first composable profiles so coding agents can only touch the files and tools they need.

Use caseUse it to wrap any local agent CLI so it cannot read SSH keys or shell configs while still working in the project directory.

alexzhu0

Pre-execution evidence control-plane that makes agent actions policy-driven, testable, and auditable before they hit external runtimes.

Use caseUse it to gate tool calls with evidence contracts and keep execution outside the control plane.

0xenzyme

Adapter-driven control plane that turns roadmaps into goals, tasks, run DAGs, gates, verification, and state sync for coding agents.

Use caseUse it to let a host agent drive scoped execution and evidence collection without routing every step manually.

genai-io

Lean open-source terminal agent runtime in a single Go binary with native speed and full openness.

Use caseUse it to run a minimal provider-agnostic coding loop from one static binary.

cocoonstack

Lightweight MicroVM engine on Cloud Hypervisor with instant snapshot/clone, OCI support, and Docker-like CLI for AI sandboxes.

Use caseUse it to spawn CoW-forked VMs for ephemeral agent environments with low memory overhead.

trevordev

Single-file Node agent CLI under 500 LOC with no framework dependencies for rapid architecture experiments.

Use caseUse it as a baseline loop to prototype context or completion strategies without scaffolding weight.

stratonext

Local YAML-driven factory that queues coding agents in isolated Git worktrees with plan/code/test/review pipelines.

Use caseUse it to parallelize multiple features from one driver agent without worktree conflicts.

jodan-alberts

LangChain-like harness for System-1 models such as Jev, focused on tool calls and iterative solving.

Use caseUse it to wire simple iterative tool loops around fast decision models.

ixchio

Self-correcting Docker-sandboxed runtime that generates, executes, catches errors, and iterates until the task passes.

Use caseUse it to run generate-execute-repair loops inside locked containers for code tasks.

community

Rootless Linux sandbox with gVisor support for running untrusted apps safely without full virtualization overhead.

Use caseUse it to contain agent-generated processes under gVisor on a developer machine.