The Context and Control Model for Production
Joined June 2024
- Tweets156
- Following497
- Followers89
- Likes127
We are back in London next week for Observability & SRE in Enterprise?
Join and @spirosoik and @pmoust for a private roundtable about L1/L2/L3 support, coding agents and production reliability.
October 22 · London
brig v0.4.0 gives new sandboxes their own networks by default on Linux and on macOS.
Run coding agents for different projects on one machine, while keeping their dev servers and test APIs separate.
In this demo, one sandbox tries to reach a web server in the other. The connection times out.
We then start both with --network shared, and the same request works.
You can run unrelated tasks side by side and enable network sharing when agents need to work together.
#OpenSource #Sandboxing
Read more here: brig.sh/docs/policies/#netwo…
When did you last test your kill switch?
Our own @artemisllm speaks at @conf42com Feature Flags:
“Your Kill Switch Is Untested and You Will Find Out at 3am”
Free online · Oct 15 · 17:00 GMT
brig v0.4.0 limits where your coding agent can send your code and credentials.
This release brings egress policy enforcement on Linux! If brig cannot enforce the policy, then the run is refused.
Allow the services you need for the job. Then brig enforces your network policy outside the sandbox, so the rules also apply to the scripts and dependencies the agent runs. In this demo, an example domain works. Requests to Github API and a direct connection to 1.1.1.1 are blocked, even from a root shell inside the sandbox.
#OpenSource #Sandboxing
Read more here: brig.sh/docs/policies/#enfor…
In San Francisco this Friday for #sftechweek?
Join our CTO, Panagiotis Moustafellos and DevRel Artemis Leonardou, for a private roundtable on AI, security and production reliability.
October 9 · 8–11 PM PT · San Francisco
#SFTechWeek #SRE
Reserve your seat: partiful.com/e/Pn2exmrdLqCDe…
NOFire AI retweeted
I'd rather put a coding agent in its own microVM than keep auto-approving it on my host OS, especially when open weights this size are actually downloadable.
Naive-N0.5-Flash. MIT 309B MoE with 15.5B active and a native 1M context, built with no full-attention layers. Weights are up today; announced API pricing is $0.10 / $0.40 per million tokens, though the API is not live yet.
OpenScience. Free Apache science workbench that reads papers, writes and runs code, and Autoresearch hill-climbs experiments on Modal, your machine, or Slurm. Install with npm and open a browser workspace.
Brig. Go CLI plus daemon that runs agents like Claude Code inside a microVM on Apple Silicon or Linux, so the agent gets its own kernel. Apache 2.0; landed on Show HN yesterday.
Push back if you'd still auto-approve on the host and treat the open MoE as a curiosity.
NOFire AI retweeted
Tired of coding agents that can touch your whole laptop from one bad prompt?
Try brig (brig-sh/brig) - a Go CLI that runs agents inside a microVM on your Mac or Linux box. One project mount, no host keychain by default, trash the sandbox when done.
New engineers are shipping with #AI. Is your on-call training ready?
@artemisllm speaks at @sreday_com San Francisco on Oct 2, 11:30 a.m. PT.
Come meet her at the Harness office. Use SRE50 for 50% off tickets.
brig v0.3.0 is out.
Rootless Linux support, simpler setup and local app previews.
Thanks to @anan0s , @alexsapran, Maria Gkoutha, @pmoust and Vangelis Katsikaros.
Thanks also @p80n_sec of @EndorLabs for reporting the security issue.
Read the release notes here: github.com/brig-sh/brig/rele…
What does “junior developer” mean when you can ship with AI from day one?
@artemisllm is speaking at @devconf_us:
“The End of the Junior Developer”
Sept 25 · 2:20 PM ET · Boston
We had a blast at Signals Conference! Thank you to the team behind all the hard work that went into the first #Reliability in the Age of AI conference in Europe.
@pmoust presented the principles behind our work and introduced #Brig, a free and open-source #sandbox for coding agents. It's part of our vision and how we're building the first platform for controlled autonomy in production operations in the age of AI, with safety guarantees.
Learn more about why we built our own microVMM in the comments.
