[adamgold7]

We've been working on exactly this at Islo. Zero-setup microVM sandboxes with isolated networking by default, plus an approval workflow layer so agents can request capabilities and humans approve/deny in real-time.

The credential problem is handled through proxy middleware - agents never see real tokens, requests get routed through policy-checked proxies that inject credentials only for approved operations.

Happy to share more: https://islo.dev

[pbowyer]

Is there only a cloud-based mode for Islo, or can I run this entirely on my laptop?

[ashwinr2002]

This is unreachable?