ClamBot – AI agent that runs all LLM-generated code in a WASM sandbox
WASM sandbox beats exec() for AI agents, but the category is crowded.
Ultra-minimal Linux-like sandbox for AI agents: shell, coreutils, VFS, and a Wasmtime-hosted JS runtime in one crate
Tinysandbox is like just-bash, but supports a minimal secure JS runtime via QuickJS WASM, random file IO, VFS checkpoint and restore, and streaming IO for working with large files.
It's designed for super-lightweight agents that don't need full linux, but still need the emergent behavior of shell commands and script writing to complete their task.
WASM sandbox beats exec() for AI agents, but the category is crowded.
MCP sandbox isolation for agents; E2B/Modal/Docker/WASM backends already exist separately.
WASM sandboxes per parser replace $200K legacy gateways at $0.05/MB.
Ultra-lightweight CNNs achieving 86% accuracy with under 12k parameters.
Hypervisor isolation for AI agents beats containers when running untrusted code locally.
Virtualenv for system isolation—your configs carry over but SSH keys stay protected.