microsandbox

Why we included this project

If you need to run code you don't fully trust, like an AI agent's generated scripts or a user's notebook, microsandbox puts each job in its own microVM with a dedicated Linux kernel, so the host stays out of reach even if the workload goes rogue. It boots in under 100 milliseconds and works as an embeddable library, so you can launch sandboxes from Rust, Python, TypeScript, or Go without standing up a daemon or a separate server. The interface stays close to Docker, meaning you point it at a standard OCI image and reuse commands, shells, and volumes instead of rewriting your pipeline. Since secrets never enter the VM and networking is controlled from the host, it holds up for agent tool use, ephemeral CI jobs, and scraper automation where isolation matters.