MicroVM

A lightweight hardware-virtualized sandbox (e.g. Firecracker-style) that boots in milliseconds to give an agent VM-grade isolation from the host at near-container speed.

grounded in: HN trend theme 'Sandboxing agents away from your real machine' — Clawk gives coding agents a disposable Linux VM so they never touch your laptop