Act · Sealed sandboxes

The hands,
sealed.

Every agent gets its own sealed machine. Fork it, break it, rewind it.

178to a container
653sandbox ready
8copies per fork

A sealed machine for every agent.

A VM per agent

Hardware isolation, not a shared kernel.

Eight live copies

Fork a running sandbox to explore in parallel.

Rewind in ~1 s

Undo anything the agent did.

Keys stay outside

An egress broker holds the secrets.

Evidence, chained

Hash-chained record of every run.

Docker-compatible

Your tools, unchanged.

kosa8kosa8.com ↗
curl -fsSL https://kosa8.com/install.sh | sh
Better together