~/reading

30

Issue 30/October 2, 2026/9 tools · 2 headlines

Declarative sandboxes and control planes that keep agent loops alive

Today's picks center on Kubernetes-native sandboxes, local microVMs, durable goal kernels, and fleet orchestrators that power users actually wire under their agents. Isolation, warm pools, and cross-session state beat chat wrappers.

01 — Power tools

The stack

  1. 01harnessGitHub
    LoopX↗

    loopx-project

    Local-first control plane with durable state kernel for long-horizon agents and teams, goals, evidence, heartbeats, and cross-runtime handoffs.

    Use caseUse it to keep multi-day coding or research goals alive across sessions with claims, leases, reward memory, and recoverable peer ownership.

    control-planelong-horizondurable-stateheartbeatlocal-first
  2. 02harnessGitHub
    Paperclip↗

    paperclipai

    Open-source app and server for managing teams of AI agents at work with org charts, budgets, goals, adapters, and cost tracking.

    Use caseUse it to hire heterogeneous agents as employees, assign company goals, and track handoffs and spend from one dashboard.

    orchestrationmulti-agentgovernancedashboardadapters
  3. 03repoGitHub
    CLI-Anything↗

    HKUDS

    Hub and harnesses that wrap existing CLI software into agent-native interfaces with per-app agent-harness modules and plugins.

    Use caseUse it to expose Blender, GIMP, Ollama, n8n or dozens of other tools as structured agent skills without rewriting the apps.

    cliagent-nativeskillsharnessplugins
  4. 04repoGitHub
    AgentVM↗

    deepclause

    Lightweight Node.js WASM-based Alpine Linux VM for agents with shell, networking, firewall and persistence for isolated command execution.

    Use caseUse it to run agent shell commands inside a worker-thread Linux VM with DHCP, port forwards and snapshottable state.

    wasmlinux-vmsandboxnodejsalpine
  5. 05harnessGitHub
    Harbor↗

    various / Terminal-Bench related

    Generalized harness for evaluating and improving agents at scale, paired with terminal benchmarks.

    Use caseUse it to run large-scale agent rollouts against Terminal-Bench style tasks with consistent isolation and scoring.

    eval-harnessterminal-benchscaleimprovement
  6. 06toolGitHub
    Mitos↗

    snapshot-fork microVM projects

    Snapshot-fork microVM sandboxes that give agent sessions clean isolated starting states with declarative lifecycle and parallel execution.

    Use caseUse it to fork agent sandboxes from snapshots so each trial starts clean and can run in parallel without shared state.

    microvmsnapshotforksandboxparallel
  7. 07toolGitHub
    Autobox↗

    freakynit

    Low-friction sandbox that attaches per-tool permissions and instant clonefile repo copies so agents can destroy a writable tree then sync back.

    Use caseUse it on M-series Macs to let hesitant teams get best-effort isolation without full VM setup friction.

    sandboxpermissionsclonefilemacoslow-friction
  8. 08harnessGitHub
    Agent Lightning↗

    Microsoft

    Training-oriented harness with optimization loops over agent rollouts for policy improvement rather than one-shot scoring.

    Use caseUse it to close the loop from agent trajectories back into better behavior via APO-style training.

    trainingevalsoptimizationmicrosoftrollouts
  9. 09harnessGitHub
    Castor↗

    castor-ai / claytonia et al.

    Secure execution layer that turns every agent tool call into a kernel syscall with budgets, immutable journals, and suspend/resume.

    Use caseUse it to bound agent power with structural budgets and pause/resume without replaying costly early steps.

    execution-layersyscallbudgetjournalsuspend

02 — In the wild

Articles and releases

  1. articleForkast
    The Harness Pattern Is No Longer a Thesis — It Is the Infrastructure Architecture↗

    Blair Hayes

    OpenAI DevDay and concurrent vendor drops turned the agent harness into baseline infrastructure of identity, events, sandboxes and governance. The piece argues sandboxes are becoming edge-native compute while every major cloud races identical four-layer stacks.

    harnessinfrastructuresandboxgovernanceanalysis

    Read

  2. releaseGitHub Releases
    Agent Sandbox v1.0.4 release notes↗

    kubernetes-sigs

    v1.0.4 adds Kubernetes lifecycle events for Sandboxes, streaming file downloads across SDKs, async sandboxd support in Python, automatic expiration in TypeScript, and stronger concurrency isolation for the RL SDK. Stability, security and docs improvements land alongside the new event surface.

    kubernetesagent-sandboxreleasesdklifecycle

    Shipped

Get the daily tools digest

RSS