Building a rootless, namespace powered (deeply stretching the definition of a container), on demand application workspace.

- Each component in a mini app in a heavily locked down container - Components are deployed and built in a web workspace, in the same workspace you can open a terminal and use your favourite coding agent to work on component code (each terminal is itself heavily sandboxes, has rw access only to the edited component code and users home dir) - Everything comes with heavy rbac and minimum permissions - Oh so much more

Explaining this well is hard, much like explaining to someone what Kubernetes or AWS does. This is at a level of what a sophisticated company infrastructure team would run, just as a workspace you can deploy for yourself easily and agents just build within that framework (I’m a cofounder of a infra/compute/datacenter startup and intimately familiar with this kind of complexity)

The main thesis is that Claw-style agents still feel like school projects, and that in the agentic era apps on demand will be more of a thing, and that the current systems weren’t built to deal with a whole new app built every few minutes.

May or may not end up as open source soon