28 रिपॉजिटरी
Isolated runtimes specifically configured for running autonomous agents and their associated tasks.
Distinct from Secure Execution Environments: Distinct from general secure execution environments: specifically tailored for the lifecycle and resource needs of AI agents.
Explore 28 awesome GitHub repositories matching security & cryptography · Agent Execution Environments. Refine with filters or upvote what's useful.
This project is a structured educational resource and technical guide for designing and implementing autonomous systems using large language models. It provides a comprehensive curriculum and code samples focused on agentic design patterns, autonomous development, and the creation of systems capable of planning and executing multi-step tasks. The resource details the implementation of agentic retrieval-augmented generation, where models autonomously plan and refine data searches. It covers a wide array of orchestrators and design patterns, including metacognitive reflection for self-correctin
Utilizes sandbox environments and runtime state objects to isolate task execution and prevent context clutter.
Nanoclaw is an LLM agent orchestrator and multi-platform chat gateway designed to deploy and manage isolated AI agents. It provides a containerized runtime that executes agents within sandboxed Linux containers, ensuring filesystem and state isolation through dedicated workspaces and host bind-mounts. The project distinguishes itself through a unified routing pipeline that connects agents to diverse messaging platforms, including WhatsApp, Discord, Slack, Telegram, Signal, and iMessage. It integrates the Model Context Protocol to extend agent capabilities via managed external data and functio
Runs agents in isolated runtimes specifically configured for their lifecycle and resource needs.
OpenClaude is an LLM orchestration interface and multi-provider AI gateway that connects various AI providers and local models to an integrated tool suite. It functions as an agentic tool execution environment and a system for AI-powered code editor integration, enabling in-editor chat and automated coding tasks. The project provides a gRPC AI agent service that exposes model capabilities and file editing tools to external applications as a headless service. It also includes a configuration layer for managing provider credentials and routing specific agents to different model APIs. The syste
Provides a runtime environment specifically configured for executing model-driven shell and file system operations.
This project is a Python framework for building autonomous, event-driven agent systems. It provides a unified runtime for orchestrating multi-agent workflows, managing persistent conversation state, and executing code within secure, isolated sandbox environments. The framework is designed to handle complex task delegation, allowing agents to invoke other agents as tools while maintaining context across multi-turn interactions. The framework distinguishes itself through its deep integration with the Model Context Protocol, enabling agents to connect to external data sources and remote services
Provides secure, isolated workspaces for executing agent tasks and managing file operations.
AgentScope is a multi-agent framework and orchestration platform designed for building and coordinating teams of language model agents. It provides a system for managing multiple agents that collaborate to solve complex tasks through structured communication and state sharing. The project distinguishes itself with a focus on production-ready deployment and security, featuring a multi-tenant hosting service that ensures session isolation between different users. It includes a sandboxed tool execution environment and fine-grained permission controls to manage how agents access system resources
Provides isolated runtimes for running agent-driven code with fine-grained control over system resource permissions.
This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad
Configures isolated runtimes and execution policy engines to secure autonomous agent tasks.
NemoClaw is an LLM agent orchestrator and sandboxed execution environment designed to deploy and manage the lifecycles of large language model agents. It provides a secure runtime that isolates persistent agents from the underlying host system to ensure operational security. The system includes a secure LLM inference gateway that acts as a managed routing layer, securing communication between AI agents and inference engines to prevent unauthorized access. It also integrates with NVIDIA OpenShell to run specialized agents within a secure shell environment. Operational control is provided thro
Maintains long-running agent states within secure containers to support continuous operation without context loss.
OpenFang is an operating system for LLM agents designed to orchestrate autonomous agents with built-in task scheduling, tool sandboxing, and multi-model routing. It provides a secure AI execution environment that integrates prompt injection scanning, cryptographic audit trails, and resource metering to ensure controlled processing. The platform distinguishes itself through a comprehensive security architecture, featuring fuel-metered tool sandboxing and an immutable activity audit trail based on cryptographic hash-chains. It implements high-assurance identity verification via signed manifests
Implements an isolated runtime for agents featuring prompt injection scanning and resource metering.
Claude Quickstarts is a development framework and collection of reference implementations designed for building autonomous agents. It provides the foundational patterns necessary to orchestrate multi-agent workflows, enabling models to perform complex, multi-step tasks across software engineering, customer support, and computer-use domains. The platform distinguishes itself through specialized capabilities for desktop and browser automation, allowing agents to interact with graphical interfaces by capturing visual context and executing precise mouse and keyboard inputs. It includes robust inf
Packages agents into containerized templates to ensure secure and consistent execution environments.
DeepCode is an agentic development framework designed to orchestrate autonomous AI agents for software engineering tasks. It functions as a multi-agent workflow orchestrator that translates natural language requirements into functional codebases by coordinating specialized agents for architectural planning, intent analysis, and implementation. The platform integrates multiple language models to power these automated routines, providing a unified environment for complex development projects. The system distinguishes itself through its ability to transform academic research papers into executab
Provides configuration settings for operational environments, model selection, and response constraints for autonomous coding agents.
E2B is a cloud-based infrastructure platform designed to provide secure, isolated execution environments for code and shell commands. It functions as an ephemeral orchestrator that provisions lightweight virtual machines, allowing developers and autonomous agents to run untrusted processes within a sandbox that is completely separated from the host system. The platform distinguishes itself through its focus on programmable, serverless workspaces that support the full lifecycle of cloud-based development. By utilizing hardware-level isolation and snapshot-based resumption, it enables the near-
Provides programmable workspaces for autonomous agents to run untrusted code securely.
OpenBrowser is an AI web agent toolkit and automation framework designed to translate natural language instructions into executable browser workflows. It functions as a headless browser controller and orchestrator, enabling the creation of autonomous agents that navigate websites, interact with elements, and extract data using plain English commands. The system features a sandboxed execution environment that utilizes domain whitelists and memory limits to ensure secure web interaction. It distinguishes itself through a command-line interface for triggering autonomous tasks with configurable m
Provides isolated runtimes specifically configured to manage the resource needs and security constraints of autonomous AI agents.
This project is a comprehensive framework for the orchestration, evaluation, and context management of large language model agents. It provides a set of architectural patterns and standards for designing agent interactions, integrating external tools, and establishing memory architectures to persist knowledge across sessions. The system focuses on optimizing the limited memory of language models through token-aware context compression and filesystem-based context offloading. It incorporates secure execution environments using sandboxed virtual machines and isolated containers to safely run ba
Deploys sandboxed virtual machines and isolated containers to securely execute background coding tasks.
Upsonic is a Python framework and orchestrator for building autonomous AI agents. It provides the infrastructure to develop self-operating systems that execute complex workflows and manage tasks independently using a scripting language. The project functions as an agentic tool integration layer, connecting agents to third-party data sources and external service APIs through standardized communication protocols. To ensure security, it includes an isolated execution environment that restricts shell and file operations to a specific workspace to prevent path traversal and dangerous commands. Ad
Provides isolated runtimes and restricted workspaces to ensure the secure execution of autonomous AI agents.
This project is an LLM coding agent orchestrator and AI software engineering platform designed to manage fleets of agents that autonomously solve issues, handle pull requests, and fix CI failures. It functions as an agentic CI/CD automator and parallel workflow manager, coordinating the end-to-end development lifecycle from initial ticket tracking to final code merging. The system is distinguished by its modular plugin framework and isolated worktree management, which allow multiple agents to work on separate coding tasks simultaneously without file system conflicts. It utilizes role-based mo
Provides the ability to swap between different compute layers like tmux, Docker, or Kubernetes for agent execution.
Yao is an LLM agent framework and low-code web app builder designed for orchestrating autonomous AI agents. It provides a platform to design, deploy, and coordinate agents with specialized personas that can plan tasks, utilize external tools, and execute multi-stage pipelines. The project distinguishes itself through a Model Context Protocol server for connecting assistants to external binaries and HTTP services, and a gRPC remote execution engine that allows agents to manage remote servers and devices. It includes a model-agnostic provider bridge that supports dynamic switching between vario
Runs agent tasks within isolated Docker containers to ensure secure and controlled tool operations.
OpenShell is a security framework and sandboxed execution runtime for autonomous AI agents. It provides isolated environments using containers and virtual machines to protect host infrastructure and sensitive data from unauthorized access during agent execution. The system distinguishes itself by combining hardware-accelerated passthrough for host GPU access with a security gateway that intercepts model API calls. This gateway manages credentials by stripping caller information and injecting backend secrets, ensuring sensitive API keys remain off the local filesystem. The platform covers bro
Provides isolated runtimes using containers and virtual machines specifically configured to execute autonomous AI agents securely.
Microsandbox एक microVM सैंडबॉक्स रनटाइम और हार्डवेयर-पृथक कोड निष्पादक है जिसे अविश्वसनीय कोड चलाने के लिए डिज़ाइन किया गया है। यह एक एम्बेडेड वर्चुअल मशीन मैनेजर के रूप में कार्य करता है जो एप्लिकेशन को बैकग्राउंड डेमन की आवश्यकता के बिना सीधे कोड के भीतर हल्के वर्चुअल मशीन को स्पॉन और नियंत्रित करने की अनुमति देता है। यह सिस्टम AI एजेंटों के लिए एक सुरक्षित निष्पादन वातावरण प्रदान करता है, जो उन्हें टूल्स निष्पादित करने और फ़ाइलों को प्रबंधित करने की अनुमति देने वाले सर्वर कंट्रोल्स को उजागर करता है। यह गेस्ट वर्चुअल मशीन को इनिशियलाइज़ करने के लिए मानक कंटेनर इमेज प्रारूपों और वॉल्यूम वर्कफ़्लो का उपयोग करता है, और एक सीक्रेट मैनेजमेंट तंत्र लागू करता है जो संवेदनशील कीज़ को वर्चुअल मशीन मेमोरी में प्रवेश करने से रोकता है। यह प्लेटफॉर्म पृथक वर्कलोड ऑर्केस्ट्रेशन के पूर्ण जीवनचक्र को कवर करता है, जिसमें वातावरण का निर्माण, निगरानी और निष्कासन शामिल है। इसमें CPU और मेमोरी की आउट-ऑफ़-बैंड संसाधन निगरानी, गेस्ट इमेज कैशिंग, और तत्काल कमांड और अलग बैकग्राउंड सत्र दोनों के निष्पादन की क्षमताएं शामिल हैं।
Provides an isolated runtime specifically configured for running autonomous agents and their associated tasks.
Hatchet is an open-source durable workflow engine and task orchestration platform. It provides a framework for building and executing fault-tolerant, multi-step pipelines as directed acyclic graphs (DAGs), with automatic retries, scheduling, and real-time observability. The system is built around durable task checkpointing, which persists execution state after each step so work can resume from the last checkpoint after a worker crash or restart, and it supports event-driven task resumption that pauses a task until a matching external event arrives. The platform distinguishes itself through it
Executes the agent process in your own infrastructure with direct access to credentials, without relying on MCP for isolation.
Rivet is a distributed infrastructure for managing the lifecycle, addressing, and persistence of stateful actors and durable execution engines. It provides a distributed process sandbox that executes application logic within lightweight isolates, ensuring resource isolation and fast cold starts. The system is designed to coordinate multi-step operations using persistent queues and timers to guarantee reliable task completion across distributed environments. The platform specifically enables the orchestration of stateful AI agents that maintain persistent memory and state across long-running i
Provides isolated runtimes specifically configured for the execution and resource management of autonomous AI agents.