didericis aba9a823ba docs(research): document macOS agent VM isolation approach ...

Transcript-style notes on running an agent in a hardware-isolated
microVM on macOS. Covers Virtualization.framework / vfkit / libkrun
choices, hardware-isolation guarantees, driving VMs from Python
(subprocess or PyObjC), pipelock as the egress proxy, vsock for the
control channel, and egress enforcement via
VZFileHandleNetworkDeviceAttachment + gvisor-tap-vsock.

2026-05-11 16:31:40 -04:00

..

prds

docs(prd): update PRD 0003 to reflect the shipped design

2026-05-11 14:47:17 -04:00

research

docs(research): document macOS agent VM isolation approach

2026-05-11 16:31:40 -04:00

ci.md

PRD 0002: Test pipeline on Gitea Actions (#3)

2026-05-09 02:48:03 -04:00

INDEX.md

chore: remove journal and project-local init-entry skill

2026-05-09 23:55:39 -04:00

logo.svg

docs: add project logo and trademark disclaimer to README

2026-05-10 01:40:05 -04:00