Astrid

Health v2 · maintenance only

Adoption not part of the score

10273 stars · 135 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Astrid is a portable, capability-secure operating system for composable software, where every component runs as a sealed WebAssembly capsule with no ambient authority. Its small Rust microkernel routes events, enforces cryptographic ed25519 capability grants, runs the Wasmtime sandbox, and records audit trails, making it a runtime-level security boundary for AI agents.

Use cases

• run AI agents in a sandboxed runtime with no ambient file or network access
• grant agents explicit, revocable capabilities for files, hosts, and tools
• compose agent components as WASM capsules with a WIT-typed ABI
• prevent prompt injection and jailbreaks from escalating privileges
• audit every external effect an agent attempts
• build and distribute custom agent distros as signed archives
• host MCP tools behind capability-checked host calls

When to choose

• you need OS-grade security boundaries for untrusted agent code rather than prompt-based trust
• you want cryptographic, revocable capability grants scoped to resource patterns
• you want to compose agent components in WASM with explicit authority
• you need an audit trail of all agent side effects

When to avoid

• you just want a simple agent framework with prompt-level guardrails and no sandboxing
• you need a mature 1.0 product - it is pre-1.0 with low crate download counts
• you need deep integration with a specific model provider or agent loop, which Astrid deliberately avoids
• you cannot adopt Rust/WASM tooling in your stack

Facets

framework · maturity active

agent-framework security mcp llm-inference cli wasm cryptography security large-language-models developer-tools self-hosted rust cli cross-platform capability-security wasm-sandbox agent-runtime microkernel ed25519-grants wasmtime wit-abi capsules audit-trail distro sandbox ai-agents macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="astrid-runtime/astrid")