perplexityai / SPACE
Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.
perplexityai / SPACE
aaif-goose / goose
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
oven-sh / bun
All-in-one JavaScript and TypeScript toolkit shipped as a single executable, bundling a runtime, bundler, test runner, and package manager.
microsoft / mxc
Sandboxed execution system that runs untrusted code on Windows, Linux, and macOS using OS-native sandboxes or VMs behind one policy model.
keegan0521 / CinderVM
Deterministic bytecode VM for agent execution - verified images, snapshots and a hash-chained replay journal
smol-machines / smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.
embassy-rs / embassy
Modern embedded framework, using Rust and async.
Dicklesworthstone / destructive_command_guard
The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
restatedev / restate
Restate is the platform for building resilient applications that tolerate all infrastructure faults w/o the need for a PhD.
trailbaseio / trailbase
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
PerryTS / perry
A native TypeScript/JavaScript compiler written in Rust. Compiles TypeScript/JavaScript directly to executables using SWC and LLVM.
microsoft / litebox
A security-focused library OS supporting kernel- and user-mode execution
apache / auron
Apache Auron is an accelerator for big data engines, leveraging native vectorized execution to accelerate query processing.
eval-exec / neomacs
NEO Emacs (WIP): GPU powered Emacs written in Rust with a modern display engine. Aiming for modern design & multi-threaded Elisp, 10x performance, zero-pause concurrent GC and 100% Emacs compatibility.
watchexec / watchexec
Executes commands in response to file modifications
hyperlight-dev / hyperlight
Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead.
cloudflare / wirefilter
An execution engine for Wireshark-like filters
Dstack-TEE / dstack
Open framework for confidential AI
rivet-dev / rivet
Rivet Actors are the primitive for stateful workloads. Built for AI agents, collaborative apps, and durable execution.
golutra / golutra
Multi-agent AI orchestration platform for automation, workflows, and developer tools. Golutra transforms Codex, Claude Code, and OpenClaw into a unified agent system with parallel execution, task orchestration, long-running workflows, and AI productivity workspace.
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
resonatehq / resonate
Distributed Async Await — Durable Executions, Dead Simple
paradigmxyz / reth
Modular, contributor-friendly and blazing-fast implementation of the Ethereum protocol, in Rust
Rust-GPU / rust-cuda
Ecosystem of libraries and tools for writing and executing fast GPU code fully in Rust.
moltis-org / moltis
A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on your hardware.
succinctlabs / sp1
SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture.
facebookexperimental / hermit
Hermit launches linux x86_64 programs in a special, hermetically isolated sandbox to control their execution. Hermit translates normal, nondeterministic behavior, into deterministic, repeatable behavior. This can be used for various applications, including replay-debugging, reproducible artifacts, chaos mode concurrency testing and bug analysis.
automic-vault / automic-vault
CLI security is broken. The packaging layer is where we fix it.
xiazhi88 / Desic-Terminal
Open-source AI-native quant trading workstation for OKX crypto markets (Windows/macOS). Charts, order execution, AI trading assistant & automation behind code-enforced risk gates, Python strategy backtesting. 开源 AI 量化交易工作台：AI 自动交易、策略回测。
jieyefriic / rp-engine
YAML-native agent workflow execution engine, written in Rust
obsidiansystems / cargo-dyndrv
Execute the Cargo build graph with Nix derivations, dynamically
zerobootdev / zeroboot
Sub-millisecond VM sandboxes for AI agents via copy-on-write forking
shadow / shadow
Shadow is a discrete-event network simulator that directly executes real application code, enabling you to simulate distributed systems with thousands of network-connected processes in realistic and scalable private network experiments using your laptop, desktop, or server running Linux.
TraceMachina / nativelink
NativeLink is a Nix-powered, open source, high-performance build cache and remote execution server, compatible with Bazel, Soong, Pants, Buck2, Reclient, and other RE-compatible build systems. It offers drastically faster builds, reduced test flakiness, and support for specialized hardware.
ThousandBirdsInc / chidori
The agent framework where every run is durable, replayable, and resumable by default.
fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
tensorlakeai / tensorlake
Tensorlake is a serverless runtime for sandboxes and deploying background agentic applications
stencila / stencila
Documents with Scientific Intelligence
facebook / dotslash
Simplified executable deployment
rex-rs / rex
Rex is a safe and usable kernel extension framework that allows loading and executing Rust kernel extension programs in the place of eBPF.
RalfJung / cargo-careful
Execute Rust code carefully, with extra checking along the way
dbos-inc / dbos-transact-rust
Database-Backed Durable Rust Workflows
microsoft / pg_durable
PostgreSQL in-database durable execution
skyzh / type-exercise-in-rust
Learn advanced Rust by building a type-safe, auto-vectorized database expression engine
jaemk / self_update
Self updates for rust executables
tessi / wasmex
Execute WebAssembly from Elixir
starkware-libs / cairo-vm
cairo-vm is a Rust implementation of the Cairo VM. Cairo (CPU Algebraic Intermediate Representation) is a programming language for writing provable programs, where one party can prove to another that a certain computation was executed correctly without the need for this party to re-execute the same program.
mrpulor-gh / nuphus
Nuphus — 本地优先的 AI Agent：真实桌面执行力 + 手机第二块屏幕。Local-first AI agent with real desktop execution and dual-device real-time sync.
1rhino2 / fnprint
match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
npci / ainxt-cli
AiNxt CLI is an open-source AI coding agent that brings AI-powered software development directly to the terminal. It can understand code, build features, fix issues, automate tasks and execute commands using the AI models and providers chosen by the developer.
codejunkie99 / autoharness
macOS coding-agent control center: one objective, routed to direct execution, a bounded loop, a swarm, or a dynamic DAG. Local only, no external writes.
uzokingkong / BTG-packer
A Rust-based x86-64 PE protection framework with RISC program virtualization, polymorphic VM bytecode, CFG transformation, runtime hardening, integrity checks, and execution verification.
submilli / submilli-runtime
Execute agent-generated TypeScript in isolated WebAssembly, with runtime-enforced semantic permissions.
Encapsul / daedalus
Package an app into one self-extracting Linux ELF. CLI on Linux/macOS/Windows; artifact runs on Linux.
golemcloud / golem
Golem Cloud is the agent-native platform for building AI agents and distributed applications that never lose state, never duplicate work, and never require you to build infrastructure.
lambdaclass / ethrex
Minimalist, stable, modular, fast, and ZK native implementation of the Ethereum protocol in Rust. L1 and L2 execution client.
Abomination81 / copybot
Abomination81 Copybot — self-hosted Polymarket copy-trading execution engine.
withcoral / coral
The execution layer for AI agents. Act across more of your systems with precise controls: safer, faster and more efficient than MCP tools and gateways.