Nucleus: Enforced permissions for AI agents – policy+enforcement in one stack

There is also a Website https://coproduct-opensource.github.io/nucleus/architecture/...

I have stumbled on this project while dabbling around how to launch many firecracker VMs on a MacBook with >= M3 cpu to isolate agents.

What do others do to isolate agents?