CubeSandbox

Why we included this project

Running untrusted or LLM-generated code safely usually comes down to execution isolation, and CubeSandbox attacks that problem by booting hardware-isolated microVMs in tens of milliseconds, each with its own guest kernel rather than a shared container boundary. That lets you host long-running agent processes, full service stacks like Redis or MySQL, or one-shot code execution under the same lifecycle primitives, with snapshot and clone for cheap experimentation and rollback when a run goes sideways. If you already use E2B, the SDK-compatible API is a smooth drop-in, and the auto-pause/resume plus low memory overhead matter when you want many agents per node without inflating infrastructure costs. It's a runtime and hosting layer.