Self-hosted microVM sandboxes and harness control planes that power-users actually clone

instavm

Rust-vmm based hypervisor plus multi-node orchestrator for ephemeral agent and RL sandboxes with warm pools and snapshots.

Use caseUse it to self-host a Firecracker alternative control plane with 35ms acquire times for bursty agent workloads.

superserve-ai

Firecracker microVM infrastructure with long-running sessions, COW forks, credential broker, and TypeScript/Python SDKs.

Use caseUse it to give autonomous agents persistent isolated VMs that snapshot and fork without 24-hour kill limits.

uvwt

Secure MCP runtime that lets agents operate local machines, servers, and containers under explicit permission boundaries.

Use caseUse it to give any chat agent controlled multi-device file, shell, Git, and browser access without model inference.

adnanmasood

Enterprise-style agent harness control plane sample with planning, sandboxed execution, A2A delegation, approvals, memory, and budgets.

Use caseUse it as a cloneable reference to wrap an OpenAI Agents SDK loop with governance and FastMCP enterprise tools.

chrobakpiotr

Reusable execution contract for spec-driven agents covering request/result documents, validators, recovery, and telemetry.

Use caseUse it to pin a shared offline-checked contract so multiple backends stay compatible on launch and cancel semantics.

Mirko Zorz / AWS

AWS shipped Strands Box, an OS-level Seatbelt sandbox for macOS (Linux coming) that routes every shell, Python, MCP, and network action through Dogwood policy checkpoints. Agents can no longer YOLO; rules can condition later actions on earlier outcomes such as rate limits or test-pass gates.

Shipped

GitHub

GitHub made local sandboxing GA across Copilot CLI, the app, and VS Code Agent Host, powered by Microsoft Execution Containers. Policies now restrict filesystem, network, credentials, and MCP at the OS level independently of the model in use.

Shipped