Ephemeral zero-credential sandbox for untrusted and agent-written code: isolates, resource limits, verified post-conditions, threat tests.
nodejs docker cli security typescript sandbox isolate isolation worker-threads design-by-contract ai-agents untrusted-code resource-limits capability-security llm isolated-vm agent-safety container-isolation ephemeral-fs
-
Updated
Aug 12, 2026 - TypeScript