Trail of Bits ships coop, a Rust CLI that runs Claude Code and Codex inside disposable Firecracker or Lima microVMs

GitHub·high signalXBlueskyLinkedInCopy link

coop (github.com/trailofbits/coop, 83 stars, last pushed 7 September) gives each project a throwaway VM where the agent has full tool access to Docker, git, compilers and package managers with no path back to the host. `coop setup` installs Firecracker and a guest kernel on Linux; macOS requires Lima via Homebrew. Usage is `coop up` then `coop claude` or `coop codex`, which is a materially lower-friction sandbox than the devcontainer approach Trail of Bits published earlier.