Public story · 2026-03-18 · source-backed

Zeroboot: Sub-Millisecond VM Sandboxes.

Issue

2026-03-18

Confidence

source-backed

Sources

Redaction

passed

Story

Firecracker + CoW mmap forking spawns KVM-isolated sandboxes in 0.79ms p50 with 265KB memory per instance — versus E2B's ~150ms and ~128MB. At this scale, sandboxed code execution becomes viable inside interactive agent loops where latency directly impacts UX. GitHub

Trail of Bits published coop, a Rust CLI running Claude Code and Codex inside disposable Firecracker or Lima microVMs.
Each project gets a throwaway VM where the agent has full tool access to Docker, git, compilers and package managers with no path back to the host (GitHub). coop setup installs Firecracker and a guest kernel on Linux; macOS goes through Lima via Homebrew. Usage is coop up then...
Mastra ships v1 ToolProvider runtime plus MicroVM and MySQL backends.
The TypeScript framework added a v1 ToolProvider runtime for managing OAuth-backed connections, @mastra/mysql as a first-class storage backend, and a VercelMicroVMSandbox built on ephemeral Firecracker microVMs (GitHub). The MicroVM sandbox is the standout. Per-session isolate...
Six independent sandbox projects are now competing on "give the agent a disposable computer."
In roughly eight weeks: omnigent-ai/omnigent (8,418 stars), vercel/eve (4,492), clawkwork/clawk (951, "give coding agents a disposable Linux VM, not your laptop"), tastyeffectco/sandboxd (885), BitMiracle-AI/Dormice (557, pitching "the SQLite of agent sandboxes," self-hosted,...
Claude Code's cloud sandbox boots a custom kernel in 430ms
Rohan Adwankar disassembled two hosted agent sandboxes. Claude Code runs Firecracker KVM guests on kernel 6.18.5-fc-v20 with a Rust/Tokio process_api binary as PID 1 instead of systemd, reaching init in about 430ms and full harness readiness in 6.4 seconds, with a 256GB writab...
Mastra 1.62.0 stops shutdown from destroying remote sandboxes.
@mastra/[redacted], released August 26, adds an optional SandboxComputer capability to workspaces covering screenshots, mouse and keyboard control, display info and wait tools, with providers in @mastra/daytona and a new @mastra/e2b-desktop package bundling E2B command, proces...
Agent Plugins 1.0 went GA — and a lab outside the authoring group shipped support the same week
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...

Source trail

adammiribyan/zeroboot More from github.com

Entities

CoW E2B Firecracker GitHub KVM Millisecond VM Sandboxes Zeroboot

Provenance

Canonical issue: Ramsay Research Agent — March 18, 2026
AI generated: no
Story unit: 2026-03-18-zeroboot-sub-millisecond-vm-sandboxes
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

Zeroboot: Sub-Millisecond VM Sandboxes.

Story

Related stories

Trail of Bits published coop, a Rust CLI running Claude Code and Codex inside disposable Firecracker or Lima microVMs.

Mastra ships v1 ToolProvider runtime plus MicroVM and MySQL backends.

Six independent sandbox projects are now competing on "give the agent a disposable computer."

Claude Code's cloud sandbox boots a custom kernel in 430ms

Mastra 1.62.0 stops shutdown from destroying remote sandboxes.

Agent Plugins 1.0 went GA — and a lab outside the authoring group shipped support the same week

Source trail

Entities

Provenance

Zeroboot: Sub-Millisecond VM Sandboxes.

Story

Related stories

Trail of Bits published coop, a Rust CLI running Claude Code and Codex inside disposable Firecracker or Lima microVMs.

Mastra ships v1 ToolProvider runtime plus MicroVM and MySQL backends.

Six independent sandbox projects are now competing on "give the agent a disposable computer."

Claude Code's cloud sandbox boots a custom kernel in 430ms

Mastra 1.62.0 stops shutdown from destroying remote sandboxes.

Agent Plugins 1.0 went GA — and a lab outside the authoring group shipped support the same week

Source trail

Entities

Provenance

Story

Related stories

Trail of Bits published coop, a Rust CLI running Claude Code and Codex inside disposable Firecracker or Lima microVMs.

Mastra ships v1 ToolProvider runtime plus MicroVM and MySQL backends.

Six independent sandbox projects are now competing on "give the agent a disposable computer."

Claude Code's cloud sandbox boots a custom kernel in 430ms

Mastra 1.62.0 stops shutdown from destroying remote sandboxes.

Agent Plugins 1.0 went GA — and a lab outside the authoring group shipped support the same week

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance

Story

Related stories

Trail of Bits published coop, a Rust CLI running Claude Code and Codex inside disposable Firecracker or Lima microVMs.

Mastra ships v1 ToolProvider runtime plus MicroVM and MySQL backends.

Six independent sandbox projects are now competing on "give the agent a disposable computer."

Claude Code's cloud sandbox boots a custom kernel in 430ms

Mastra 1.62.0 stops shutdown from destroying remote sandboxes.

Agent Plugins 1.0 went GA — and a lab outside the authoring group shipped support the same week

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance