Show HN: Plimsoll, a self-hosted sandbox for code your AI agent writes
Plimsoll is a self-hosted sandbox tool designed to safely execute untrusted code generated by AI agents. It uses a tiered isolation system to ensure security and provides verifiable evidence of execution environments.
Why it matters
As AI agents become more autonomous, secure sandboxing is critical to prevent malicious code execution and ensure system integrity.
plimsoll runs untrusted code, such as code an AI agent wrote, inside a sandbox, and every result says how strong that sandbox was. A request can demand a minimum strength; if the sandbox is weaker, nothing runs.
The name comes from the Plimsoll line , the load limit painted on the outside of a ship's hull where anyone can check it. plimsoll does the same for the isolation tier : how strong the wall around a run is, stated as one of four levels, weakest first: process , container , kernel , vm . The tier is a value on every result, not a sentence in a datasheet. A request can set a floor , the weakest tier it will accept, and the official Go client checks the tier again when the result comes back.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in