Clone-ready microVM substrates and harness loops that power-users wire under any agent

Microsoft Research / Azure Research

Ultra-light cross-platform micro-VM sandbox built on OpenVMM for untrusted agentic workloads with hardware isolation.

Use caseUse it to spin hardware-isolated Linux guests for agent code execution on KVM, MSHV or Windows Hypervisor Platform without a full hypervisor stack.

boxlite-ai

Daemonless embeddable micro-VM runtime that runs OCI images inside hardware-isolated Boxes with secret brokering and egress allow-lists.

Use caseUse it to give any coding agent a persistent, kernel-isolated workspace that boots fast and never leaks host credentials.

kvcache-ai

Distributed Firecracker platform for massive-scale agent environments with sub-50 ms snapshot resume and fork support.

Use caseUse it to run thousands of parallel agent rollouts or RL environments with cheap idle snapshots and on-demand image loading.

sporevm

Forkable aarch64 (and experimental x86) Linux microVMs with fast save, restore, CoW fan-out and managed networking.

Use caseUse it to warm one parent VM then fork hundreds of agent children that share memory pages for parallel coding tasks.

ilbertt

One-click Firecracker microVM hosting for single-binary apps with persistent disk and sleep/wake.

Use caseUse it to let an agent compile and deploy a tiny service binary into its own isolated microVM in one skill call.

Microsoft

Modular cross-platform Rust VMM that underpins NVX and OpenHCL for lightweight guest isolation.

Use caseUse it to build or extend custom microVM runtimes when you need a clean Rust VMM base for agent sandboxes.

Katakate

Kata Containers plus Firecracker microVM stack packaged for K3s agent workloads.

Use caseUse it to run agent sandboxes as Kata/Firecracker pods on a lightweight Kubernetes cluster with allow-list egress.

abshkbh

Self-hosted Cloud Hypervisor microVM platform with checkpoint-restore for agent code execution.

Use caseUse it to host long-running agent sessions that can snapshot and resume without losing filesystem state.

lynaghk

Lightweight microVM-oriented sandbox tooling aimed at secure agent code paths.

Use caseUse it to prototype hardware-isolated execution environments for untrusted LLM-generated scripts.

0xchasercat

Experimental microVM runtime focused on agent isolation boundaries.

Use caseUse it to explore alternative VMM surfaces when standard Firecracker or libkrun paths are constrained.

lingcage

Rust KVM VMM that cages agents inside cloned microVMs with multi-arch support.

Use caseUse it to boot once then clone per-sandbox microVMs for dense agent fleets on x86, aarch64 or riscv.

AshishKumar4

Free unlimited POSIX sandboxes on Cloudflare Workers using WASM and Durable Objects.

Use caseUse it to give agents disposable POSIX environments at the edge without managing VMs yourself.

konradasb

Tool that slices bare-metal hosts into thousands of Firecracker or Cloud Hypervisor microVMs.

Use caseUse it to pack high-density agent sandboxes onto metal for cost-efficient parallel evaluation.

hyper-swe

Sandboxed version control where agent work lands in per-task microVMs and only reviewed results reach main git.

Use caseUse it to let agents commit freely inside isolated VMs while your real repo stays clean until human accept.

angolardevops

Daemonless rootless-first Rust container and microVM runtime alternative to Docker/Podman.

Use caseUse it as a lightweight local runtime when agents need both OCI containers and microVM isolation without a daemon.