isobox: Run a command in a sandbox, with the same flags on every OS ↗ github.com

isobox is a Go CLI that compiles one sandbox policy to each OS's native mechanism: Seatbelt on macOS, gVisor on Linux, and AppContainer on Windows. Instead of pretending every backend is equal, it uses an explicit capability model that flags where enforcement falls short, and a strict mode that refuses anything that isn't portable.

vx32: Lightweight User-level Sandboxing on the x86 ↗ pdos.csail.mit.edu

hl: Run aarch64-linux ELF binaries on macOS Apple Silicon ↗ github.com

webframe v0.2 ↗ github.com

webframe is now a tool for scripting and testing pages, not just watching them. You can inject stubs, run test files after load, pass in secrets, set timeouts, and let the page set the exit status, and hidden pages run unthrottled on every platform.

webframe v0.1 ↗ github.com

The first release of webframe, which runs a web page like a program: it loads a URL in a hidden web view and wires its console to stdout, its exceptions to stderr, and stdin to a JavaScript REPL. It's a single ~5 MB binary that uses the webview your OS already has.

Wanix v0.4 Preview: Composable compute in HTML ↗ github.com

Wanix Elements are web components for declaring filesystems, tasks, VMs, terminals, and even VS Code in plain HTML, so you can build a sandboxed Unix-style environment in the browser with a few tags. This preview also adds the rc shell and a Wanix-ready Alpine Linux as CDN extras.

Apptron v0.7: Offline Sites, Console Embeds, and Much More ↗ github.com

Our biggest Apptron release yet. Embeds can now be just a terminal in Console Mode, public sites work offline with an automatic service worker, and environments got 4x faster networking and up to 2x faster builds.