• Sources: coop repository, HN discussion
  • Summary: Trail of Bits published coop, a command line tool written in Rust. It launches coding agent sessions, including Claude Code and Codex, inside microVMs that are discarded after use.
  • Why it matters: It answers the coding-agent sandbox escapes of this summer with VM isolation rather than deny-default process profiles, which is the boundary those escapes crossed.
  • Follow-up: Whether the microVM boundary holds against the Docker-socket and host-share chains that broke the process-profile sandboxes.

send feedback on this story