jingkaihe/matchlock
View on GitHub ↗ ★ 653 Go
Matchlock secures AI agent workloads with a Linux-based sandbox.
7 mentions on Hacker News by 7 people: 1 story, 6 comments · first 2026-02-08 · latest 2026-10-23
20082026
-
I think matchlock ( https://github.com/jingkaihe/matchlock ) is the right design for this context (at least for secrets and keys) - a combination of virtual machines (not just containers, it is built on top of firecracker) with credential…
comment by igorhvr · 2026-10-23 · in OpenShell – A safe, private runtime for fleets of autonomous AI agents -
…https://github.com/smol-machines/smolvm zerobox https://github.com/afshinm/zerobox and matchlock https://github.com/jingkaihe/matchlock They all have pros and cons. Pick the one that suits you best. Then you're also agent harness flexible…
comment by mathstuf · 2026-06-07 · in Anthropic, please ship an official Claude Desktop for Linux -
…placeholder string will be replaced with the actual secret value. edit to actually add the link [0] https://github.com/jingkaihe/matchlock
comment by wilkystyle · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents -
…related projects as well, some lower level than others. I wish I had time to evaluate them all: - https://github.com/jingkaihe/matchlock - https://github.com/mishushakov/libkrun-go - https://github.com/earendil-works/gondolin -…
comment by jpeeler · 2026-02-21 · in macOS's Little-Known Command-Line Sandboxing Tool (2025) -
…virtio-fs, to keep it minimal: https://github.com/firecracker-microvm/firecracker/pull/1351... ) https://github.com/jingkaihe/matchlock/blob/123a4df680fb8cc0... https://github.com/jingkaihe/matchlock/blob/123a4df680fb8cc0...…
comment by yencabulator · 2026-02-08 · in Matchlock – Secures AI agent workloads with a Linux-based sandbox -
just from looking at it on Linux it runs Firecracker: https://github.com/jingkaihe/matchlock/blob/main/pkg/vm/linu... on macOS uses the Apple's Virtualization.Framework Go wrapper: https://github.com/jingkaihe/matchlock/blob/main/pkg/vm/dar…
comment by ushakov · 2026-02-08 · in Matchlock – Secures AI agent workloads with a Linux-based sandbox -
▲ 148
Matchlock – Secures AI agent workloads with a Linux-based sandboxstory by jingkai_he · 2026-02-08 · 62 comments