Reading up on Firecracker

Boring Computers delivers instant Firecracker microVMs with snapshot-restore in ~3 ms, a terminal, browser, coding agents, and an AI driver, all open source.

Deno Sandbox launches microVMs that control network egress and protect API keys from exfiltration in LLM-generated code, then deploy directly to Deno Deploy.

Sandboxing tools for AI agents differ fundamentally by boundary (containers, gVisor, microVMs, Wasm), not just by policy, and picking the wrong one creates either leaks or excessive cost.