Series

Building a Sandbox IDE

4 parts.

  1. Part 1 ·

    microVMs and Firecracker

    Why each agent session gets its own Firecracker microVM — the requirements that forced the choice, and the high-level shape of the system from browser to guest.

  2. Part 2 ·

    Socket Programming

    How the host actually talks to a Firecracker microVM — Unix domain sockets, why a socket is just a file, the curl --unix-socket trick, and Firecracker's one-process-per-VM model.

  3. Part 4 ·

    File Systems Considerations for a microVM Sandbox

  4. Part 5 ·

    Should the Agent Loop Run Inside or Outside the Sandbox?

    Why we run the agent loop outside the sandbox and keep the sandbox down to a thin tool executor.