The Context and Control Model for Production
Joined June 2024
- Tweets156
- Following497
- Followers89
- Likes127
brig v0.4.0 gives new sandboxes their own networks by default on Linux and on macOS.
Run coding agents for different projects on one machine, while keeping their dev servers and test APIs separate.
In this demo, one sandbox tries to reach a web server in the other. The connection times out.
We then start both with --network shared, and the same request works.
You can run unrelated tasks side by side and enable network sharing when agents need to work together.
#OpenSource #Sandboxing
When did you last test your kill switch?
Our own @artemisllm speaks at @conf42com Feature Flags:
“Your Kill Switch Is Untested and You Will Find Out at 3am”
Free online · Oct 15 · 17:00 GMT
brig v0.4.0 limits where your coding agent can send your code and credentials.
This release brings egress policy enforcement on Linux! If brig cannot enforce the policy, then the run is refused.
Allow the services you need for the job. Then brig enforces your network policy outside the sandbox, so the rules also apply to the scripts and dependencies the agent runs. In this demo, an example domain works. Requests to Github API and a direct connection to 1.1.1.1 are blocked, even from a root shell inside the sandbox.
#OpenSource #Sandboxing
In San Francisco this Friday for #sftechweek?
Join our CTO, Panagiotis Moustafellos and DevRel Artemis Leonardou, for a private roundtable on AI, security and production reliability.
October 9 · 8–11 PM PT · San Francisco
#SFTechWeek #SRE
@artemisllm is speaking at @conf42com #DevSecOps.
“Gate the Action, Not the Alert: Checking an Agent Before It Runs”
Where checks fit, what they cost, and which actions need them.
Free online · Oct 1 · 17:00 GMT
New engineers are shipping with #AI. Is your on-call training ready?
@artemisllm speaks at @sreday_com San Francisco on Oct 2, 11:30 a.m. PT.
Come meet her at the Harness office. Use SRE50 for 50% off tickets.
brig v0.3.0 is out.
Rootless Linux support, simpler setup and local app previews.
Thanks to @anan0s , @alexsapran, Maria Gkoutha, @pmoust and Vangelis Katsikaros.
Thanks also @p80n_sec of @EndorLabs for reporting the security issue.
What does “junior developer” mean when you can ship with AI from day one?
@artemisllm is speaking at @devconf_us:
“The End of the Junior Developer”
Sept 25 · 2:20 PM ET · Boston
We had a blast at Signals Conference! Thank you to the team behind all the hard work that went into the first #Reliability in the Age of AI conference in Europe.
@pmoust presented the principles behind our work and introduced #Brig, a free and open-source #sandbox for coding agents. It's part of our vision and how we're building the first platform for controlled autonomy in production operations in the age of AI, with safety guarantees.
Learn more about why we built our own microVMM in the comments.
We talked to a lot of engineers about production incidents.
And today we are launching the first Context and Control Model for Production and announced our $2.5M seed from @marathon_vc , with participation from an exceptional group of angel investors.
#ContextAndControl #AISRE #ProductionAI
4/5Every investigation is persistent.
Start a thread in the terminal during an incident at 3am. Pick it up in the web UI the next morning. Context doesn't die when you close the tab.
1/5 We just shipped NOFire CLI.
From investigation to action. In the terminal. No browser required.
Here's why this matters 🧵
#AISRE #SRE #ReliabilityEngineering #CloudNative
