MicroVM isolation layers that let power users own the agent loop

kuasar-sandbox

Production microVM platform with independent guest kernels, snapshot templates, pause/resume, on-demand loading and single-to-cluster deployment for agents and RL.

Use caseUse it to run high-density agent or serverless workloads with KVM isolation and stateful lifecycle control.

yzs-lab

Observability-driven system that automatically evolves coding-agent harness components while holding the base model fixed, lifting Terminal-Bench scores.

Use caseUse it to run evaluate-analyze-improve loops that produce transferable frozen harnesses for SWE-bench and other models.

mariobm

Self-hostable stateful Linux microVMs for coding agents with client on Mac/Linux and server-side isolation plus snapshots.

Use caseUse it to give agents persistent interactive shells and files on hardware you control without public ports.

Docker

Docker extended its local Sandboxes product to managed cloud microVMs billed by the second, letting developers move agent sessions between laptop and cloud with one command. Kits ship for multiple coding agents and enforce declared authority at launch.

Shipped

Cagri Sarigoz

SideKernel addresses survey-found usability barriers that keep most developers from sandboxing agents on Mac. It scores high on capability tests among local microVM options designed specifically for coding-agent isolation.

Read

Tanvir Kour

The piece argues that production agents require hypervisor-level isolation rather than shared-kernel containers to contain blast radius. It details benefits including nested Docker, egress control and reproducible workspaces that containers cannot match.

Read