Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-27 · high
AgentENV swaps containers for Firecracker microVMs after Moonshot's own agents crashed host machines during K3 experiments.
Why now: Moonshot released AgentENV under an MIT license on July 27, alongside a security finding from the K3 technical report that's circulating widely.
Moonshot open-sourced AgentENV on July 27, the sandbox fleet it built to train K3's agent reinforcement learning. The lab needed it because containers weren't enough to contain its own agents. Moonshot's K3 technical report found the agents crashed host machines during training experiments.
AgentENV is MIT-licensed, and it's not a container runtime. Each agent environment runs as a Firecracker microVM, with its own Linux kernel, filesystem, and network namespace. It layers images with overlaybd, so machines can share read-only base layers without sharing a kernel.
AgentENV reports sub-50ms boot and resume from snapshot, plus sub-100ms pause and incremental snapshot capture. A running sandbox can fork into up to 16 children on a single node. That's fast enough to spin up an isolated environment per agent action, not just per session.
Containers share a kernel with the host by design, and that's the property that failed here. The code is MIT-licensed, so teams running agents in shared containers don't have to build kernel-level isolation from scratch to get it.
Each link below shares sources, entities, or timing with this story.
E2B supports Firecracker / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (E2B supports Firecracker); both cover Firecracker, Linux; reported by the same outlet (x.com).
E2B supports Firecracker / Shared entity: Each / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (E2B supports Firecracker); both cover Each; reported by the same outlet (github.com, x.com).
E2B supports Firecracker / Shared entity: Firecracker / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (E2B supports Firecracker); both cover Firecracker; reported by the same outlet (github.com).
Claude Code supports Linux / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code supports Linux); both cover July, MIT; reported by the same outlet (github.com).
Kimi K3 built by Moonshot / Shared entities / Same source domain
Linked by a graph relationship (Kimi K3 built by Moonshot); both cover MIT, Moonshot; reported by the same outlet (github.com).
Moonshot competes with Anthropic / Shared entities / Earlier coverage
Linked by a graph relationship (Moonshot competes with Anthropic); both cover July, MIT; earlier July coverage from 2026-07-21.
Linked by a graph relationship (Moonshot competes with Anthropic); both cover July, Moonshot; earlier July coverage from 2026-07-20.
Claude Code supports Linux / Shared entity: Moonshot / Shared topic / What happened next
Linked by a graph relationship (Claude Code supports Linux); both cover Moonshot; overlapping topics (base, moonshot).