podbox

A workspace / dev-container tool that gives each project a reproducible, disposable development sandbox. podbox drives a familiar OCI / Podman interface, but runs each workspace inside a KVM-class microVM — a real hardware-virtualization boundary, not a shared kernel. A primary goal is a secure sandbox for coding AI agents (and any untrusted or self-modifying code) to execute without unmediated access to the host.

Status: early development. Nothing is implemented yet beyond a stub binary — the product contract and its Rust implementation binding are specified first.

Documentation

Full documentation lives under docs/, organised as a Diataxis tree:

• Product contract (technology-neutral): docs/reference/spec/
• Rust implementation binding (ADRs): docs/decisions/
• Guides (contributing, adding a subcommand): docs/guides/
• Architecture / rationale: docs/explanation/

Start at the documentation index.

Development shell

This project ships a Nix flake devShell with all tooling pinned.

# Interactive: allow direnv to load the shell on cd
direnv allow

# Ad hoc: enter the devShell directly
nix develop

Tasks

Common tasks run through the project task runner:

just lint    # run linters and formatters
just test    # run the test suite
just build   # build the project

License

Licensed under the MIT License, Copyright (c) 2026 Gustavo Basso.

Contributing

Contributions are welcome. See docs/guides/contributing-rust.md and open an issue to discuss substantial changes before submitting a pull request. Ensure just lint and just test pass.