Drop is a rootless Linux sandbox tool that isolates programs and coding agents without requiring root access or container setup. It uses Linux namespaces and optionally gVisor for additional security, allowing users to safely run third-party code, agents, and PyPI/npm packages with configurable permission restrictions while maintaining access to their existing distribution's installed programs.
Agent Substrate is a secure agent execution runtime designed to run millions of sandboxes with high density, supporting sub-500ms resume operations and native zero-trust isolation. Built on Kubernetes, it multiplexes idle agent applications onto shared workers and supports multiple sandbox technologies including microVMs and gVisor. The system enables framework-agnostic deployment of AI agents and stateful applications with persistent state across suspend/resume cycles.