- Sources: coop repository, HN discussion
- Summary: Trail of Bits published coop, a command line tool written in Rust. It launches coding agent sessions, including Claude Code and Codex, inside microVMs that are discarded after use.
- Why it matters: It answers the coding-agent sandbox escapes of this summer with VM isolation rather than deny-default process profiles, which is the boundary those escapes crossed.
- Follow-up: Whether the microVM boundary holds against the Docker-socket and host-share chains that broke the process-profile sandboxes.
send feedback on this story