Docker and the Linux Kernel Isolate Your Agent, and Where They Don't

This is why I made my agent sandboxing code such that you can choose your level of security (docker, gvisor, kata, firecracker).

https://github.com/kstenerud/yoloai

Hey man, what is timbre AI? how does it work?