| ▲ | agentdev001 2 hours ago | |
Take a look at Nvidia OpenShell, and their dev blogs on it. That seems like what you're looking for. | ||
| ▲ | neobrain an hour ago | parent [-] | |
Sounds OpenShell locks filesystem access on sandbox creation - arguably the most important isolation feature, at least for my use cases. Architecturally it looks right though! | ||