Reading up on Firecracker

Vercel launches a two‑week public HackerOne bounty offering up to $1 million for researchers who can escape its Sandbox microVM isolation.

clawk gives coding agents their own disposable Linux VM, letting them install packages and run code while keeping host files, keys, and network strictly isolated.

Boring Computers delivers instant Firecracker microVMs with snapshot-restore in ~3 ms, a terminal, browser, coding agents, and an AI driver, all open source.

Deno Sandbox launches microVMs that control network egress and protect API keys from exfiltration in LLM-generated code, then deploy directly to Deno Deploy.

Sandboxing tools for AI agents differ fundamentally by boundary (containers, gVisor, microVMs, Wasm), not just by policy, and picking the wrong one creates either leaks or excessive cost.