code-airlock: Isolating Coding Agents in Ephemeral microVMs
Trivo_ · reddit · 2026-07-05
A developer open-sourced code-airlock, a tool that runs AI coding agents inside ephemeral microVMs (Docker Sandboxes). It clones the repository within the sandbox, allowing the agent to install dependencies, build, launch containers, and modify files without accessing the host filesystem or credentials. Users then review the diff and pull the necessary changes. The design uses total environment isolation to replace fragile deny rules, currently supporting Claude Code, Codex, and OpenCode.
More from coding & agent
- One prompt, full Blender animation: dev says he never touched Blender once — iamfakhrealam · 2026-10-26
- Claude Code finds root backdoor in Honda Civic head unit, then debloats it — IndraVahan · 2026-10-26
- Claude Code + Monid MCP builds a $12K/year B2B prospecting engine on live data — aryanXmahajan · 2026-10-26
- Karpathy shares CLAUDE.md rulebook to stop AI coding agents from piling up tech debt — mdancho84 · 2026-10-26
- Rethinking dependencies in the agent era: drop libs that save 20 lines of code — gethackteam · 2026-10-26
- RustGIS hits 2,000 GitHub stars in two weeks with agent-first architecture — giswqs · 2026-10-26