Secure forkable VM sandboxed compute for AI agents and workloads.

KubernetesFirecrackerKataQEMUK3sLonghornCiliumAnsible

code executionsandboxingDocker in VM

Python

A purpose-built Rust VMM: fork a running Kubernetes cluster (~105 ms minimal guest, ~1.1 s Ubuntu k3s+Cilium+Tetragon) or a single VM in ~5 ms, and warp the guest clock so idle time costs nothing.

KVMvirtiocontainerdK3sAeneas

cluster forksnapshot treeRL environments

Rust