Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps

uriwa · reddit · 2026-11-12

Reddit user uriwa argues the default stack for AI-agent-built internal tools is backwards: provisioning a Docker container, running npm install, waiting a minute for a Next.js build, and paying idle cost 99% of the time — while handing an autonomous agent full Node/Python execution plus production keys means either reviewing 3,000 lines of boilerplate per change or hoping prompt injection never exfiltrates a Stripe key.

His proposal: instead of heavier VM sandboxes, restrict the runtime itself. A Turing-incomplete language compiling to a static data-flow graph lets the compiler prove every outbound host, secret read, and tenant boundary before anything runs. That's the idea behind Safescript (@uri/safescript), a statically verified TypeScript subset with JSX support.

Core thesis: agents will generate disposable software per ticket, deal room, and workflow — only viable when deploying an app is closer to sending a message than provisioning a server.

Original post →

More from coding & agent

coding & agent channel →