process-isolation

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.

Sample application that shows how to create a Plugin Framework for a WPF application

AntNest 是一个采用蚁后 / 工蚁架构（或蜂后 / 工蜂）的 AI 编程助手。你可以把它想象成一个蚁群： 蚁后（本体）：只负责思考、规划、决策。蚁后从不亲自执行任何命令。 工蚁（复制体）：蚁后需要干活时，会生成一只工蚁——把自身代码复制一份，派到隔离的临时目录里执行命令。工蚁干完活把结果交回来，然后被立即销毁。

⭕ zero ➡️ to 📦 container in ⌛ in 🐹 Golang

Step-by-step plans for forking OrcaSlicer and adding Bambu printer support via a process isolation bridge. Fed to an AI agent — you follow along.

A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.

Joblet is a micro-container runtime for running Linux jobs with: Process and filesystem isolation (PID namespace, chroot) Fine-grained CPU, memory, and IO throttling (cgroups v2) Secure job execution with mTLS and RBAC Built-in scheduler, SSE log streaming, and multi-core pinning Ideal for: Agentic AI Workloads (Untrusted code)

A lightweight process isolation tool, requiring absolutely no privileges to run

A high-performance serverless runtime for Bun functions in Go. Packages and executes functions in pooled, isolated containers with fast invocation speeds and a streamlined deploy and invoke workflow.

Archived - see https://github.com/hrygo/hotplex for active development

Sandbox untrusted Rust code with isolated processes

Run marked pytest tests in grouped subprocesses (cross-platform).

Embeddable, process-isolated JavaScript runtime for untrusted and AI-generated code.

A library for .NET framework applications to discover, install, and manage plugins from NuGet feeds, running each plugin in an isolated process for maximum stability.

Isolation sandbox for AI agents — process, namespace, and Firecracker capsules

It's a fancy process isolation tool that creates an isolated environment for your binary in under 10 minutes and lets you reset the execution state in under seconds. All this, with a couple of one-liner commands from your trusty terminal.

DSH sandbox tester: process-isolated testing ground for DeepSeek Harness

Fix context rot & pollution in long AI agent sessions. Subagents run in isolated processes — main agent stays read-only. Context isolation via process isolation.