Sep 2, 2026
Isolation Is Not an Abuse Control: Lessons From My Fleet
A free-tier signup mined crypto on my microVM fleet in 27 minutes. Containment held perfectly and it changed nothing. What I built afterwards, in what order.
9 minSep 2, 2026My Fork Docs Were Wrong: What VM Forking Really Preserves
I shipped a doc claiming forks keep processes and open files. A smoke test proved otherwise. Three fork paths measured, and the five places each breaks.
10 minSep 2, 2026Container vs microVM vs gVisor: Choosing Agent Isolation
A practical guide to picking an isolation model for AI-agent code execution, from someone who runs a Firecracker fleet: five models, five axes, one table.
9 min