agents
A desktop environment for AI agents, in one Dockerfile (locally and on Agent Substrate)
Claude Code, Chromium and Chrome DevTools MCP on a headless Wayland desktop you can watch over noVNC, running in a Substrate actor that suspends and resumes mid-task.
Sandbox matrix: what isolation do you actually get?
What a process, a rootless container, runc, gVisor, Firecracker, and Kata actually separate for an agent: filesystem, network, kernel, and privilege.