A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
-
Updated
Jul 27, 2026 - C++
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
Sample application that shows how to create a Plugin Framework for a WPF application
Step-by-step plans for forking OrcaSlicer and adding Bambu printer support via a process isolation bridge. Fed to an AI agent — you follow along.
A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.
Joblet is a micro-container runtime for running Linux jobs with: Process and filesystem isolation (PID namespace, chroot) Fine-grained CPU, memory, and IO throttling (cgroups v2) Secure job execution with mTLS and RBAC Built-in scheduler, SSE log streaming, and multi-core pinning Ideal for: Agentic AI Workloads (Untrusted code)
A lightweight process isolation tool, requiring absolutely no privileges to run
A high-performance serverless runtime for Bun functions in Go. Packages and executes functions in pooled, isolated containers with fast invocation speeds and a streamlined deploy and invoke workflow.
AntNest 是一个采用蚁后 / 工蚁架构(或蜂后 / 工蜂)的 AI 编程助手。你可以把它想象成一个蚁群: 蚁后(本体):只负责思考、规划、决策。蚁后从不亲自执行任何命令。 工蚁(复制体):蚁后需要干活时,会生成一只工蚁——把自身代码复制一份,派到隔离的临时目录里执行命令。工蚁干完活把结果交回来,然后被立即销毁。
Archived - see https://github.com/hrygo/hotplex for active development
Sandbox untrusted Rust code with isolated processes
Embeddable, process-isolated JavaScript runtime for untrusted and AI-generated code.
Run marked pytest tests in grouped subprocesses (cross-platform).
A library for .NET framework applications to discover, install, and manage plugins from NuGet feeds, running each plugin in an isolated process for maximum stability.
Isolation sandbox for AI agents — process, namespace, and Firecracker capsules
Isolated OTP application management system for Elixir/Erlang
It's a fancy process isolation tool that creates an isolated environment for your binary in under 10 minutes and lets you reset the execution state in under seconds. All this, with a couple of one-liner commands from your trusty terminal.
Fix context rot & pollution in long AI agent sessions. Subagents run in isolated processes — main agent stays read-only. Context isolation via process isolation.
Add a description, image, and links to the process-isolation topic page so that developers can more easily learn about it.
To associate your repository with the process-isolation topic, visit your repo's landing page and select "manage topics."