Hello Creators!
We’ve built something new and we’re not launching it publicly yet. Before we do, we want a small group of developers to run real workloads on it and tell us your experience.
Run untrusted AI code without holding your breath 🔒
It’s called CreateOS Sandbox: it runs untrusted, AI-generated code in isolated micro-VMs.
Real isolation — each sandbox is a Firecracker micro-VM with its own kernel, not a shared-kernel container.
Private networking — sandboxes can talk to each other over a private network.
Locked-down egress — outbound traffic is controlled at the kernel with eBPF.
Bring your own storage, and boot in seconds.
What we’d love from you:
Run something real — an agent loop, a code interpreter, CI for untrusted PRs.
Tell us what felt slow, confusing, or missing.
Push on the security model. If the isolation or egress control doesn’t match your threat model, we want to hear why.
That’s it folks, see you next week!
Sid