32
Self-hostable microVM sandboxes and declarative control planes
Power users are cloning KVM and Firecracker runtimes, Kubernetes CRD orchestrators, and meta-harnesses that treat isolation and policy as first-class infrastructure. The leverage is in warm pools, pod-per-session boundaries, and sandbox-as-tool patterns rather than another chat IDE.
01 — Power tools
The stack
- 01repoGitHubmicrovm (0xthierry)↗
0xthierry
Local Firecracker microVM tool for running isolated coding agents and dev workloads from Dockerfiles.
Use caseUse it to give any CLI coding agent a real VM boundary on your laptop with persistent disks and controlled networking.
FirecrackerlocalmicroVMisolation - 02harnessGitHubai-agent-eval-harness (AgentV)↗
najeed
MultiAgentOps verification OS and evaluation harness with industrial scenarios, mutation testing and tool sandbox.
Use caseUse it to verify enterprise agent workflows across thousands of industry scenarios before production.
evalverificationharnessenterprise - 03repoGitHubAgent Sandbox (SheerWill)↗
SheerWill007
Firecracker microVM sandbox with MCP, TypeScript SDK, jailer isolation and network namespaces.
Use caseUse it to run agent code in hardware-isolated VMs with native MCP tool surface on your infra.
FirecrackerMCPmicroVMself-host - 04toolGitHubkagent↗
kagent-dev
Kubernetes-native agent platform with sandbox workflows, templates and group agent commands.
Use caseUse it to discover and run agents plus standalone sandboxes under one CLI on a cluster.
kubernetessandboxCLIagent
02 — In the wild
Articles and releases
- releaseGitHub ReleasesAgentOS 2026.10.x desktop and gateway updates↗
use-agent-os
AgentOS shipped Run modes popovers, menu-bar gateway status, Touch ID approvals and stronger credential redaction across Mac and Windows builds. The cadence shows a local-first agent OS hardening trading and skill surfaces in daily drops.
AgentOSdesktopreleaselocal-firstShipped