Show HN: Plimsoll, a self-hosted sandbox for code your AI agent writes
Summary
Show HN: Plimsoll presents a self-hosted sandbox for running untrusted, agent-authored code. It reports the isolation boundary for each run and supports multiple providers (in-process wasm, Docker runtimes with runc or runsc, Firecracker-based VMs), with a broker that enforces per-run credentials. The project is pre-1.0, with no external security audits yet, and is released under Apache-2.0, aiming to compare against other sandboxes and enable controlled experimentation with AI agents.