MicroVM sandboxes and open control planes that let power users own the agent loop

Perplexity AI

Firecracker microVM sandbox platform with HTTP API, pause/resume, snapshots, and host-side credential and egress control.

Use caseUse it to give every agent task its own kernel-isolated Linux environment that boots in tens of milliseconds and never sees real secrets.

mattpocock

TypeScript library that orchestrates coding agents inside isolated sandboxes with configurable branch strategies and merge-back.

Use caseUse it to parallelize multiple AFK agents across Docker/Podman/Vercel sandboxes and automatically fold their commits.

statelyai

XState-powered agents where the state machine owns control flow and the model only proposes legal events.

Use caseUse it to make invalid agent actions impossible by encoding the entire loop as an inspectable, resumable state machine.

WujiangXu

Agentic memory system that dynamically organizes notes with Zettelkasten-style linking and continuous evolution.

Use caseUse it to let an agent itself decide how to index, link and refine long-term memories across sessions.

canvas-org

Continual harness optimizer that turns execution traces into prompt, tool and control-flow improvements without weight updates.

Use caseUse it to automatically evolve the scaffolding around a frozen model by evaluating candidate harness changes.

agent-diff-bench

Interactive sandboxes that replica third-party APIs (Slack, Linear, etc.) for deterministic agent evals and RL.

Use caseUse it to train or score agents against realistic API state changes without side effects or rate limits.

Perplexity / MarkTechPost

SPACE, the sandbox behind every Perplexity Computer session, is now Apache-2.0 on GitHub. It gives each task a Firecracker microVM with host-controlled credentials and egress, median 60 ms spin-up, pause/resume and an E2B compatibility wrapper.

Shipped

Ivan Tarin

Microsoft Execution Containers GA turns agent containment into a Windows platform feature with process, session and MicroVM backends. Policy now lives outside every framework, so enterprises buy isolation once instead of per-agent.

Read