MicroVM sandboxes and policy runtimes that own the agent loop

arcboxlabs

Pure-Rust macOS runtime offering Docker drop-in, nested Firecracker sandboxes for agents, full Linux/macOS VMs, and sub-200ms boots.

Use caseUse it to run coding agents inside disposable microVMs on Apple Silicon with the same API as cloud sandboxes.

NVIDIA

Policy-governed runtime that instruments kernel access, enforces filesystem/network/process rules and keeps credentials outside agent sandboxes.

Use caseUse it to wrap any coding agent in declarative allow/deny policies with formal verification before applying changes.

ApodexAI

Open-source agent runtime and TUI with native ReAct and Agent Team modes, task-scoped sandboxes and separate eval harness.

Use caseUse it to run long-horizon research or coding workflows with parallel sub-agents and fail-closed file/shell isolation.

basilisk-labs

Git-native control plane that keeps authority, plans, verification and evidence in the repo while agents do the judgment work.

Use caseUse it to bound coding-agent authority, advance lifecycle state and produce reviewable PR evidence without hiding state.

buildkite

Policy-to-microVM compiler that bakes warm spores with deps installed, provenance and deny-by-default network for repo workloads.

Use caseUse it to turn cleanroom.yaml into reproducible agent sandboxes that fork from hot snapshots for CI or local runs.

shleder

Daemon-less rootless kernel sandbox that injects immutable boundaries between fork and execve with sub-4ms latency for coding CLIs.

Use caseUse it to shim Claude Code, Codex or Aider so every spawn is Landlock/cgroup constrained without Docker overhead.

deeplethe

KVM microVM fork engine that spawns 100 CoW children from a warm parent in ~100ms for agent tree search or RL.

Use caseUse it to branch live agent environments for parallel exploration without cold boots or full image reloads.

agentic-control-plane

Open-core TypeScript modules for identity, policy, rate limits, routing, PII redaction and audit on every agent tool call.

Use caseUse it to insert a control plane that policy-checks tool invocations before any coding agent or MCP server runs them.

agent-substrate

Environment abstraction on Substrate providing remote cmd, filesystem and built-in MCP tools inside isolated actors.

Use caseUse it to give agents a stable remote environment API while Substrate handles multiplexing and snapshots underneath.

vectorize-io

Agent memory system that learns from experience and improves over time with long-term retention for multi-session loops.

Use caseUse it to attach a learning memory layer so agents retain and refine skills across coding or research runs.

autonomous-ai

Command-center harness that runs multiple coding agents and craft-specific tools side-by-side across local and remote machines.

Use caseUse it to orchestrate code plus CAD, circuits or music agents from one board with per-craft harness.json definitions.