code-airlock: Isolating Coding Agents in Ephemeral microVMs
Trivo_ · reddit · 2026-07-05
A developer open-sourced code-airlock, a tool that runs AI coding agents inside ephemeral microVMs (Docker Sandboxes). It clones the repository within the sandbox, allowing the agent to install dependencies, build, launch containers, and modify files without accessing the host filesystem or credentials. Users then review the diff and pull the necessary changes. The design uses total environment isolation to replace fragile deny rules, currently supporting Claude Code, Codex, and OpenCode.
More from coding & agent
- Kolab Benchmark Uses Pro Screen Recordings to Show AI Agents Overestimate Collaboration Quality — minnesotanlp · 2026-10-27
- Dev argues Claude burns far more tokens than GPT models for the same coding work — haider1 · 2026-10-27
- Stop building agents that can't change models: stable contracts, external state, real evals — rseroter · 2026-10-27
- Cheap models can cost more in agent harnesses than frontier ones, researcher warns — vasuman · 2026-10-27
- Kanzo: A 5k-Line Rust Kanban Binary With MCP for Claude Code and Codex — allmudi · 2026-10-27
- 'A human approves everything' is a trap: approval fatigue and how to actually design safe agents — Efistoffeles · 2026-10-27