FOSS sandbox platform for zero trust remote access without secrets

Cordium is a FOSS, self-hosted, identity-based, general-purpose, horizontally scalable sandbox platform that is built on k8s and Octelium, my main work. The main differentiator for Cordium, when compared to other dev environments (e.g. GitHub Codespaces) and sandbox platforms (e.g. E2B, Daytona, etc.), is that Cordium automatically provides identity-based, secretless secure access to resources/infrastructure (e.g. APIs, SSH, databases, k8s, etc.) without having to inject credentials (e.g. API keys and access tokens, SSH private keys/passwords, database passwords, mTLS private keys, etc.) into the sandbox where the upstream credential is held by the identity-aware proxy of the Octelium-protected resource outside the reach of the sandbox. The identity-aware proxy injects, on-the-fly, the upstream credential if the user is authorized via the Octelium policies.

In short, Cordium is not just an isolated execution environment that can replace remote development environments and sandbox platforms, but also equally a secure access platform to infrastructure/resources. It's basically a sandbox platform + ZTNA/remote-access-VPN baked-in with unified identity management, L7-aware access control and OpenTelemetry-native realtime visibility.