SideKernel: a micro-VM sandbox for running code agents on macOS

Fewer than 40 per cent of users of programming agents isolate them in a sandbox. A researcher has proposed SideKernel, a local, open-source micro-VM designed first and foremost to be easy to use.

Programming agents need autonomy on the developer's machine, while they should be treated as unreliable components. This is the paradox of this work published on arXiv. An online survey conducted by the author shows that less than 40% of users execute their agents in an isolated environment, and identifies the main brakes: laborious configuration and few local options and open source on macOS.

In response, the author presents SideKernel, a local sandbox based on virtual micro-machines and designed around these obstacles of use. He identified market solutions, selected those that met five criteria, and compared them on 23 capacity tests. Only a few are approaching SideKernel; Among them, Docker Sandboxes and SideKernel get the best scores on the features related to ease of use.

The article also provides an overview of the micro-VM open source sandboxes available on Mac for this type of agent.