AI Agent Sandboxes: Why a Single Container Isn't Enough
How to isolate code written by AI agents: comparing containers, gVisor, and KVM, examining the threat model, and running virtual sandboxes in seconds.
Architecture, networking, and operations notes for microsrv VMs, containers, and scale-to-zero.
Hermes Agent: a Self-Improving AI Agent in a Container on microsrv
What Hermes Agent from Nous Research can do and how to run it in a container on microsrv: official image pinned by digest, gateway mode, dashboard with basic auth, and publishing via an HTTPS gateway.