Search Results for "sandbox"

...Developed by NVIDIA, it provides sandboxed execution spaces that protect system resources, credentials, and data from unauthorized access. Each agent runs inside a containerized sandbox governed by declarative YAML security policies that control network access, file permissions, and process behavior. The platform includes a gateway service that manages sandbox lifecycles and routes AI inference requests through controlled providers. OpenShell also features a privacy-aware routing system that prevents sensitive information from leaving the sandbox environment. ...

A Rust client for Kubernetes in the style of a more generic client-go, a runtime abstraction inspired by controller-runtime, and a derive macro for CRDs inspired by kubebuilder. Hosted by CNCF as a Sandbox Project. These crates build upon Kubernetes API machinery + API concepts to enable generic abstractions. These abstractions allow Rust reinterpretations of reflectors, controllers, and custom resource interfaces so that you can write applications easily.

...Its simulation engine models particle dynamics and fluid interactions, creating visually engaging and often unpredictable outcomes that mimic natural processes. Sandspiel also emphasizes community interaction by allowing users to share, fork, and remix creations, turning the platform into a collaborative sandbox for experimentation. The architecture is designed to support extensibility, including the potential to define custom elements through programmable APIs.

...The project provides a unified JSON configuration schema and a TypeScript SDK while supporting multiple containment backends. Its backends include process containers, Windows Sandbox, LXC, Bubblewrap, Seatbelt, microVM-based options, Hyperlight, IsolationSession, and WSL-related containment. MXC focuses on policy-driven isolation for filesystems, networking, process execution, and runtime behavior. It is especially useful for AI tool platforms, plugin ecosystems, agent runtimes, and developer products that need safer execution of generated or third-party code.

...The design emphasizes interoperability across different integration layers, describing a separation between “North” shims (how apps or runtimes plug in) and “South” platforms (where the sandbox runs), which helps the system adapt to multiple deployment contexts. A key aspect of the project is that it targets both kernel-mode and user-mode scenarios, enabling experimentation with different trust and performance tradeoffs. The repository positions LiteBox as a foundation for building hardened execution environments where untrusted or semi-trusted components can run with reduced privileges and a minimized host interface.

...It was built for IT security professionals and bug hunters to gather intelligence about a given target or about yourself. sn0int is enumerating attack surfaces by semi-automatically processing public information and mapping the results in a unified format for follow-up investigations. sn0int is heavily inspired by recon-ng and maltego, but remains more flexible and is fully opensource. None of the investigations listed above are hardcoded in the source, instead, those are provided by modules that are executed in a sandbox. You can easily extend sn0int by writing your own modules and sharing them with other users by publishing them to the sn0int registry.