Clawk isolates AI agents in secure VMs

// 7h agoOPENSOURCE RELEASE

Clawk isolates AI agents in secure VMs

Clawk is an open-source tool that spins up disposable, network-restricted Linux virtual machines to safely run autonomous AI coding agents. By leveraging Apple's Virtualization.framework and Firecracker, it isolates untrusted agent operations like package installation and builds without risking host exploitation.

// ANALYSIS

Running LLM-generated code locally is a security nightmare, and Clawk provides a pragmatic hypervisor-level isolation layer that beats Docker-level sandboxes by avoiding container breakout risks.

–Hypervisor-Level Isolation: By leveraging Apple's Virtualization.framework, Clawk provides a strong boundary between the AI agent and the host, rather than weaker process or container-level isolation.
–Agent Freedom: Agents can run background services, install system packages, or execute builds without the constraint of standard process sandboxes.
–Lifecycle Simplicity: Designed for easy lifecycle management, these VMs can be created and destroyed quickly.
–Platform Limitations: Currently optimized for macOS (Apple silicon), with Linux (via Firecracker) still marked as experimental, which limits adoption for developers on other operating systems.

// TAGS

clawksandboxagentsecurityvirtual-machinesvirtualizationopen-sourcecoding-agentai-coding

DISCOVERED

7h ago

2026-07-13

PUBLISHED

9h ago

2026-07-13

RELEVANCE

8/ 10

AUTHOR

celrenheit

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

LAUNCH36m ago

Brockman highlights ChatGPT Work mobile experience

OpenAI President and Co-founder Greg Brockman shared his enthusiasm for ChatGPT Work, noting that while the new agent-based platform has received less attention than other recent updates, it offers a highly functional and impressive mobile experience. Powered by the GPT-5.6 model family, ChatGPT Work transitions ChatGPT from a conversational chatbot into an autonomous agent capable of executing complex, multi-step workflows and cross-app integrations directly from mobile and desktop interfaces.

LAUNCH1h ago

OpenAI launches ChatGPT Sites for web apps

ChatGPT Sites is a new feature by OpenAI designed to make internal communication more engaging and functional by letting users create custom web apps, trackers, and calculators via simple chat prompts. It eliminates traditional frontend coding and deployment steps, allowing teams to quickly generate and deploy interactive, shareable web pages.

RESEARCH1h ago

A new study demonstrates that visual pretraining on raw visual documents bypasses OCR/parsing limitations and consistently outperforms traditional text-only pretraining for building language intelligence.

Web search paper title}