AI BriefingDevvm: Open-Source Tool Creates Isolated VMs for AI Coding Agents
·2026.11.07 20:32
Key point
The tool creates per-project VMs with allowlisted networking and proxy-based token injection to protect host systems from prompt injections and rogue agents.
Details
- Devvm is a free, open-source (MIT license) tool for macOS and Linux that creates isolated VMs for each project to sandbox coding agents like Claude Code, Codex, and opencode.
- The architecture limits the blast radius of attacks by mounting only the project folder read-write, keeping host secrets like ~/.ssh and ~/.aws outside the VM, and routing all network traffic through a host-side proxy with an allowlist.
- Agent credentials remain on the host machine; the VM receives placeholders, and the proxy injects real tokens into outgoing requests, ensuring secrets are never exposed to the sandboxed agent.
- The tool supports automatic toolchain detection based on project files, custom layers for environment setup, and devcontainer.json compatibility, with subsequent VMs starting in seconds from shared base images.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Replit Replaces Docker with MicroVMs for AI Agent Sandboxing
OpenQodex: Open-Source AI Code Review Tool Verifies Agent Changes with 98% Issue RecallShow GN: ALIGNS.md - 초정렬이 오기 전 내 판단 기준과 취향을 에이전트와 자가 정렬해보세요