Daytona

Daytona provides sandboxes for running code that a model wrote, with the emphasis on speed — sub-90ms environment creation — and on state that survives between steps, so an agent can install a dependency in one turn and use it in the next. It is sold both as infrastructure for agent platforms and as a place to run AI-generated code safely.

Running generated code is the part of an agent that turns a text generator into something that can act, and it is also the part with the sharpest security edge: the code is untrusted by construction, often written against a goal rather than a specification, and occasionally trying to escape. Isolation is therefore not a feature but the requirement, and the interesting engineering is in making isolation fast enough that a sandbox per step is practical rather than a per-session luxury — which is what the millisecond figure is really about. The caveat is the licence: the repository is public but carries no licence file, so the source can be read while the terms for reusing it are undefined, and the entry records that rather than assuming open source.