zerobootdev/zeroboot
Rust-based sub-millisecond VM sandboxing system using Firecracker and KVM copy-on-write forking to isolate AI agent code execution.

Zeroboot creates lightweight virtual machine sandboxes for AI agents by leveraging Firecracker VM snapshots mapped as copy-on-write memory, allowing near-instant VM fork creation with hardware-enforced isolation. Each sandbox is a real KVM VM capable of running arbitrary code (Python shown) with approximately 0.8ms spawn latency and 265KB memory overhead. The system includes SDKs for Python integration and benchmarks against other AI agent code execution platforms like E2B and Daytona.