Drop is a rootless Linux sandbox that pairs virtualenv-style environment isolation with optional gVisor kernel protection to safely execute untrusted dependencies and autonomous coding agents.

Local developer environments have become the soft underbelly of software security due to supply chain poisoning and agentic coding tools, making rootless, friction-free local sandboxing an urgent necessity rather than an operational nuisance.

• –**Preserves local development ergonomics:** Traditional Docker containers or VMs strip away installed developer tooling; Drop leverages the existing host distribution and CLI tools while locking down process boundaries.
• –**Built for AI coding agents:** By restricting file paths and blocking unapproved access to localhost network services, Drop allows developers to run autonomous agents with relaxed execution flags without risking credential theft or catastrophic command hallucinations.
• –**Defense-in-depth with gVisor:** Supporting a user-space kernel bridges the traditional isolation gap between standard namespace containers and heavy virtualization, mitigating container breakout risks via host kernel exploits.
• –**Friction vs. adoption trade-off:** The ultimate success of Drop will depend on how cleanly its TOML configuration accommodates complex development workflows, nested tooling, and graphical debugging without breaking developer flow.