rootless
Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.
Warm sandboxes for function-shaped code — run untrusted code safely
Lightweight Linux namespace sandbox with persistent shell and instant reset
