earendil-works/gondolin

Gondolin is a TypeScript-based Linux micro-virtual machine sandbox for safely running AI agent code. It isolates the execution environment through QEMU or krun backend, and controls network and file system access by host policy to prevent data leakage. Supports CLI interaction and programming interfaces, suitable for code execution scenarios that require restricted permissions.