The hands,
sealed.
Every agent gets its own sealed machine. Fork it, break it, rewind it.
178to a container
653sandbox ready
8copies per fork
A sealed machine for every agent.
A VM per agent
Hardware isolation, not a shared kernel.
Eight live copies
Fork a running sandbox to explore in parallel.
Rewind in ~1 s
Undo anything the agent did.
Keys stay outside
An egress broker holds the secrets.
Evidence, chained
Hash-chained record of every run.
Docker-compatible
Your tools, unchanged.
curl -fsSL https://kosa8.com/install.sh | sh