Total 4 posts
Agents that execute code need isolation, but isolation costs overhead. This breaks down six sandboxing approaches — containers, gVisor, Firecracker, ZeroBoot, Apple container, and Wasm — so you can pick the right trade-off for your threat model.
When an agent takes on a task like "help me make a market-research report," the hard part isn't execution but decomposing the task and managing state. This records how I used langchain4j to implement a task tree, dependency checks, retries, and reasoning traces.
Once an agent can execute code, it can do everything a programmer sitting in front of a terminal can. Break down the trade-offs among Docker, gVisor, Firecracker, and Wasm sandboxing approaches.
Using the open-source project Horizon plus GitHub Actions' free tier, automatically scrape Hacker News, Reddit, and major official blogs every day; after AI scoring and filtering, generate a daily brief pushed to Feishu. Completely free.
