ProductsSelected
Replit 重构沙箱引擎：基于 microVM 隔离 AI 智能体运行环境
Why we picked it
Replit 把沙箱引擎重写成 microVM，每个沙箱独立内核，还讲了凭据怎么隔离，做智能体基建的可以看看细节。
Replit 围绕 microVM 重建了沙箱引擎，每个沙箱拥有独立的 Linux 内核。架构设计包含三个要点：使用最小化的 guest 内核、在 guest 之外执行网络访问控制、通过 credential broker 让工作负载发起授权请求而不接触可复用凭据。团队在 frontier.replit.com 上详细拆解了这些架构决策。
Original · Replit
AI agents need room to work and boundaries on what they can reach. We rebuilt Replit’s sandbox engine around microVMs, giving each sandbox its own Linux kernel. We break down the decisions behind that architecture: a minimal guest kernel, network controls enforced outside the guest, and credential brokers that let workloads make authorized requests without receiving reusable account credentials. frontier.replit.com/sandbox-engine… 💬 7 🔄 1 ❤️ 6 👀 1480 📊 7 ⚡
