naman_307
Re:Show HN: NSL – WSL for Linux
on Tuesday September 29, 2026 @05:19PM (#49900759)
Is the VM layer mostly for host hygiene, or are you also treating the instances as a real security boundary when something untrusted (deps or agent-written code) runs inside?
Re:Show HN: Drop – a rootless Linux sandbox with gVisor support
on Wednesday September 23, 2026 @02:14PM (#49820227)
For agent workloads, how are you separating "where the code runs" (namespace/gVisor/microVM) from "what credentials and egress ever enter that guest"?