Show HN: PVisor, VM-isolated containers for agents

Category: infrastructure

Tags: sandboxing, agent-runtime, vm-isolation, copy-on-write, execution-policy, rust

Score: 6.3/10 (Innovation: 6, Technical: 7, Documentation: 7, Utility: 5)

PolicyVisor (pVisor) is a Rust-based runtime that executes agent CLIs and scripts with execution policies, copy-on-write workspace staging, and selective apply/drop of changes so users can review an agent's filesystem edits before accepting them. It supports host, OCI, and VM execution boundaries with execution records, network policy, and checkpoint/fork capabilities, plus experimental Docker-style CLI and sandbox daemon entry points.

Target audience: platform engineers and backend developers running autonomous agents or automation with reviewable, policy-bounded filesystem changes

Repository: https://github.com/DeepLink-org/pvisor · Rust · Apache-2.0 · 1 stars

View on Hacker News