Capsem – a Rust hypervisor sandboxing AI agents in air-gapped Linux VMs
capsem.orgIt says
"Open source, native macOS and Linux packages, boots in under 10 seconds.
curl -fsSL https://capsem.org/install.sh | sh ",
but also
"What platforms are supported?
Capsem requires macOS on Apple Silicon (M1 or later). It uses Apple's Virtualization.framework which is only available on macOS. The guest VM runs aarch64 Linux."
So ... what is it? Also, there are a lot of "schreenshot placeholder" on the home page...
Capsem supports both Linux (x86 / Arm64) and MacOs M1 or later (arm64). There are placeholders on the site as the post happen exactly as we are redoing the site ahead of the talk at unpromted: https://unpromptedcon.org/agenda-10-2026/
Documentation back online
"air-gapped" how?
There is no direct network access instead all traffic is routed through the security engine that perform network reconstruction, including parsing models and MCP sessions to enforce rules written in a custom DSL based of CEL.
What gives me confidence is the 'screenshot placeholders' on the page. Can't HN do something about this obvious AI slop bullshit?
The hacker news post caught us exactly as we are redoing the site ahead of the unprompted talk: https://unpromptedcon.org/agenda-10-2026/ - Screenshots and everything else will be back shortly. Capsem is fast moving so we delayed finishing the site until all the core features where stable.
Documentation is back online