37
MicroVM forks and local harness control planes overtake cloud IDEs
Power users are wiring disposable kernels, credential brokers, and pluggable loops into their own agent cycles. Today’s picks emphasize clone-and-run sandboxes plus self-hosted runtimes that keep secrets and state off the model path.
01 — Power tools
The stack
- 01harnessGitHubmi↗
av
Minimal self-extending sandboxed agentic harness consisting of a loop, two tools and an LLM that hot-loads new tools from .mjs files.
Use caseUse it to bootstrap a coding agent that can extend its own toolset while running inside an optional Docker sandbox.
harnessminimalsandboxself-extending - 02repoGitHubSandcastle↗
various
TypeScript library for orchestrating coding agents inside isolated sandboxes with configurable branch strategies.
Use caseUse it to spin parallel agent worktrees that stay isolated until a merge decision is made.
sandboxtypescriptorchestration - 03harnessGitHubAgnes Harness↗
AgnesAI-Labs
Pluggable agent harness designed for forward-deployed engineering with recoverable evidence-first execution.
Use caseUse it to run trustable agent workflows that produce auditable artifacts and can resume after failures.
harnessfdeevidence - 04repoGitHubdeepagents-sbx↗
restuhaqza
MicroVM backend for Deep Agents that runs every command inside a guest with its own Linux kernel and private Docker daemon.
Use caseUse it to give LangGraph Deep Agents hardware isolation so generated containers never share the host kernel.
microvmdeep-agentssandbox - 05toolGitHubmvm↗
agentstep
Hardware-isolated Linux VMs that boot in 0.35 s on Apple Silicon and the same binary on Linux Firecracker hosts.
Use caseUse it to provide coding agents native microVMs on macOS that pause to zero CPU and restore with disk rollback.
microvmmacosfirecracker
02 — In the wild
Articles and releases
- articleRetool BlogRetool launches centralized enterprise agent harness↗
David Hsu
Retool opened early access to a shared policy and execution layer that sits between every employee agent and company systems. It virtualizes filesystems and memory per user while enforcing central tool and model controls.
enterpriseharnessarticleRead