Ross ROSS = Recommend OSS · open-source software intelligence for agents

boxlite-ai/boxlite

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud. observed · 2026-08-28

github.com/boxlite-ai/boxlite · homepage · Rust · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

80/100

  • Activity 99
  • Release rhythm 91
  • Longevity 19
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 1.0
  • age_days: 269
  • days_rel: 63
  • days_push: 7
  • n_releases_24m: 39

Full methodology

Adoption not part of the score

2278 stars · 164 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BoxLite is an embeddable micro-VM runtime written in Rust that runs any OCI image inside hardware-isolated virtual machines (KVM on Linux, Hypervisor.framework on macOS, WSL2 on Windows). It is designed as a secure compute substrate for AI agents, allowing untrusted or model-generated code to run in persistent, stateful sandboxes with no daemon and no root privileges.

Use cases

  • run LLM-generated code in a secure sandbox
  • execute untrusted third-party code safely
  • give AI agents an isolated environment to run code and browsers
  • run multi-tenant isolated workloads in a backend service
  • persist agent environments across sessions with installed packages and files
  • run a coding agent in an isolated VM
  • sandbox code execution in CI or code grading systems

When to choose

  • you need hardware-level isolation stronger than containers for untrusted code
  • you want an embeddable, daemonless sandbox library with no root requirements
  • you need persistent, stateful sandboxes that survive stop/start cycles
  • you want to run any OCI/Docker image unchanged in a microVM
  • you need controlled networking with egress allowlists and secret injection

When to avoid

  • you only need lightweight container-level isolation and shared-kernel namespaces are sufficient
  • your host lacks hardware virtualization support (KVM, Hypervisor.framework, or WSL2)
  • you need a fully managed sandbox service without running your own hypervisor infrastructure
  • you need Windows or BSD guest environments, since boxes run a Linux kernel

Facets

library · maturity active

security sdk developer-tools self-hosted artificial-intelligence security developer-tools cloud-computing windows rust python go cli self-hosted cloud microvm sandboxing untrusted-code-execution oci-images hardware-isolation agent-runtime daemonless kvm hypervisor-framework code-execution sandbox virtualization ai-agents linux macos nodejs

8 sources

Member repositories

RepositoryRoleHealth v2
boxlite-ai/boxlitemain80

For agents

markdown · JSON · MCP: product_card(name="boxlite-ai/boxlite")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem