mkagenius

AWS for AI agents - https://instavm.io

Providing sandboxes through a CLI. Guardrails such as egress control and secret injection and audit trails built in.

We can also be used as 3rd party sandboxes in Anthropic managed agent and OpenAI sdk.

https://instavm.io/blog/self-hosting-claude-managed-agents-o...

6 months a bummer, but we got it for apple sandbox - coderunner (https://github.com/instavm/coderunner)

We got it yesterday, maybe they just started rolling it out and hence op posted this.

Yes it is funnily true but it was for fake news generation and not it's cyber capabilities.

Another fun little gem of information, government has something called Mayhem

> the autonomous Robo-Hacker AI called Mayhem that’s now in charge of protecting the Pentagon’s most critical systems

Guess Mythos and Mayhem had a chat

Apple containers are great for providing a sandbox to your AI coding agents

I have made it a MCP so that it's easily discoverable by all the coding agents

https://github.com/instavm/coderunner

The article misses the point that you can have a third option - harness inside and outside both.

The use cases will evolve so much more in coming weeks and months that the boundaries will blur. You can still contain the agent outside in a sandbox though.

With instavm (https://instavm.io), you can provide an OCI image built from a dockerfile.

I also felt the need for a cloud based cron like automations, so decided to build it myself https://cronbox.sh with:

  1. an ephemeral linux sandbox for each task 
  2. capability to fetch any url
  3. can use tools like ffmpeg to fulfill your scheduled task

Not just sides, the vents are much sharper.

Few years back, I tried to look on reddit for complaints regarding this - barely anything.

> The biggest problem is the coding agents don't "Fail fast and loud". They fail deceivingly.

GPT 2 and 3 used to fail fast (and loud coz we could easily see it lying)

Has to be taken in light of median income too right?

I had the exact same idea but for AI agent harnesses.

I even created an app to explain it - https://news.ycombinator.com/item?id=47381803 (deleted the app as got no traction whatsoever)

Idea was that, the ai models like opus 4.6 and codex 5.4 have become so good at trying new ways to attack a problem, that even just Bash() tool is enough.

Continuing the idea, infact even File() operations are enough.

Again continuing the same line of thought, even just a Tape is enough. Given enough time, codex and opus will achieve your target.

I think you are absolutely right. (had to)

This is a bit restrictive, doesn't take screenshots. So you can't "say take screenshots of my homepage and send it to me via email"

It doesnt allow egress curl, apart from few hardcoded domains.

I have created Cronbox in the cloud which has a better utility than above. Did a "Show HN: Cronbox – Schedule AI Agents" a few days back.

https://cronbox.sh

and a pelican riding a bicycle job -

https://cronbox.sh/jobs/pelican-rides-a-bicycle?variant=term...

Had used cactus before - https://news.ycombinator.com/item?id=44524544

Then moved to pocket pal now for local llm.

Fwiw, my pixel 8 runs Qwen3.5 4B with 2 tok/s speed. Via pocketpal app. Somehow cactus app didn't work.

holding off update seems like reasonable step till the patch comes. I also run a .local for apple containers though not docker.

You could do that with say Claude Code too with rather much simpler set up.

OPs question was more around sandboxes though. To which, I would say that it's to limit unintended actions on host machine.

Thanks. I actually used Google AI Studio for this. Prompted with my color choices and let it do the rest, turned out pretty good.

Literally made the same app, 2 weeks back - https://news.ycombinator.com/item?id=47171499

A way to run claude code inside a apple container -

  $ container system start

  $ container run -d --name myubuntu ubuntu:latest sleep infinity

  $ container exec myubuntu bash -c "apt-get update -qq && apt-get install -y openssh-server"

  $ container exec myubuntu bash -c "
    apt-get install -y curl &&
    curl -fsSL https://deb.nodesource.com/setup_lts.x |
  bash - &&
    apt-get install -y nodejs
  "

  $ container exec myubuntu npm install -g @anthropic-ai/claude-code

  $ container exec myubuntu claude --version

Oh, yes. I thought GP was mostly worried about shared VM problem.

Apple containers were released a few months back. Been using it to sandbox claude/gemini-cli generated code[1].

You can use it to completely sandbox claude code too.

1. Coderunner - https://github.com/instavm/coderunner

> Or have a `discover_skills` tool

Yes, treating the "front matter" of skill as "function definition" of tool calls as kind of an equivalence class.

This understanding helped me create an LLM agnostic (also sandboxed) open-skills[1] way before this standardization was proposed.

1. Open-skills: https://github.com/instavm/open-skills

> And with apple/container, it’s very easy to launch a semi-sandboxed Linux environment on macOS too.

I used apple containers and have put in a jupyter server in it and exposed it as an API/MCP. The isolation it provides is superior than docker.

Everything works locally.

Coderunner - https://github.com/instavm/coderunner

Did somewhat exactly that for apple container based sandbox - Coderunner[1]. You can use it to safely execute ai generated code via an MCP at http://coderunner.local:8222

A fun fact about apple containers[2], it's more isolated than docker containers as in it doesn't share the VM across all containers.

1. https://github.com/instavm/coderunner

2. https://github.com/apple/container

If you are on mac, you can use Coderunner[1]. It will run locally on your and execute any AI generated code in an apple container.

1. Coderunner - https://github.com/instavm/coderunner

Last I tried, it wasn't. In that vein you can use Qwen code too.

We are a sandbox provider company and we have a manus like agent deployed to "showcase" our capabilities. You can build one too -- maybe we will open-source it. For now, you can try it for free at https://showcase.instavm.io/

> I have since fallen off the productivity wagon unfortunately

If you don't mind sharing, what was the reason? I'm asking coz these things and also note taking isn't sustainable for me at all.

I made a comment about this, if you are on macOS - Coderunner (https://github.com/instavm/coderunner)