Eval: microsandbox for sandboxed agent task execution in cf-orch #60

New issue

Open

opened 2026-07-09 23:06:00 -07:00 by pyr0ball · 0 comments

pyr0ball commented

2026-07-09 23:06:00 -07:00

Owner

Source: https://github.com/superradcompany/microsandbox
License: Apache 2.0
Language: Rust (SDKs: Python, TypeScript, Go)

Microsandbox is a microVM runtime for executing untrusted workloads with hardware-level isolation and sub-100ms boot times. Embeds directly in applications without infrastructure setup. Includes MCP server.

CF relevance:

cf-orch: sandbox boundary for running agent-submitted code safely without full VM overhead
Each leaf agent task that executes arbitrary code (data transforms, scripts) gets an isolated microVM
MCP server means it can integrate with Claude Code and cf-orch tooling directly

Evaluate:

Can cf-orch spin up a microsandbox per task and tear it down on completion?
What's the resource overhead per microVM vs. Docker container?
Does the Python SDK fit the cf-orch agent lifecycle model?
License is Apache 2.0 — compatible with cf-orch BSL model

When: Revisit when cf-orch gets its own repo.

**Source:** https://github.com/superradcompany/microsandbox **License:** Apache 2.0 **Language:** Rust (SDKs: Python, TypeScript, Go) Microsandbox is a microVM runtime for executing untrusted workloads with hardware-level isolation and sub-100ms boot times. Embeds directly in applications without infrastructure setup. Includes MCP server. **CF relevance:** - cf-orch: sandbox boundary for running agent-submitted code safely without full VM overhead - Each leaf agent task that executes arbitrary code (data transforms, scripts) gets an isolated microVM - MCP server means it can integrate with Claude Code and cf-orch tooling directly **Evaluate:** - Can cf-orch spin up a microsandbox per task and tear it down on completion? - What's the resource overhead per microVM vs. Docker container? - Does the Python SDK fit the cf-orch agent lifecycle model? - License is Apache 2.0 — compatible with cf-orch BSL model **When:** Revisit when cf-orch gets its own repo.