# ioi/isolate

Sandbox for securely executing untrusted programs

Repository: https://github.com/ioi/isolate
Canonical: https://ross.abutalabs.com/products/isolate
Language: C
License: NOASSERTION
License Family: other
Last push: 2026-08-23T23:17:39+00:00

## Health v2 (maintenance only)
Score: 77/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 35, longevity 100
- inputs: {"age_days": 4056, "days_push": 10, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1473, forks 203 (observed 2026-08-28T04:04:49.636008+00:00)

## What it is
Isolate is a Linux sandbox for securely executing untrusted programs, originally built for programming contest judges. It uses kernel features like namespaces, control groups, and seccomp to confine executables from the host system.

## Use cases
- run untrusted code safely on linux
- sandbox submissions in a programming contest judge
- execute user-supplied programs with resource limits
- isolate processes from the host filesystem and network
- build an online judge execution backend

## When to choose
- you need to run untrusted executables on Linux with strong isolation
- you are building a competitive programming judge or automated grading system
- you want a lightweight CLI sandbox using namespaces and cgroups without containers

## When to avoid
- you need sandboxing on macOS, Windows, or BSD - Isolate is Linux-only
- you want full container images and orchestration rather than a single-process sandbox
- you need a general-purpose container runtime like Docker or Podman

## Facets
- artifact type: cli-tool
- maturity: stable
- function: security, cli
- domain: security, developer-tools, operating-systems
- platform: cli
- tags: sandbox, untrusted-code-execution, namespaces, cgroups, competitive-programming, judge-systems, sandboxing, linux

## Member repositories
- ioi/isolate (main) score 77

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:49.636008+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:34:37.953706+00:00, confidence not recorded.
  - readme: https://github.com/ioi/isolate (fetched 2026-08-28T04:04:49.636008+00:00, sha 0a03a7a4572b)
- Data as of 2026-08-30T08:39:29.467469+00:00.