重點導讀
AI 智慧體需要工作空間與可達範圍的限制。我們以 microVM 為核心重構 Replit 的沙盒引擎，讓每個沙盒擁有獨立的 Linux 核心。以下拆解此架構背後的決策：極簡客戶端核心、在客戶端之外執行網路控制，以及允許工作負載以授權方式傳送請求而不取得可重用帳戶憑證的憑證代理。https://t.co/fmS5pbguYO
AI 伴隨問答
針對這篇報導有疑問？可直接點選快捷問題或向 AI 追問背景脈絡與技術細節：
Replit ⠕@Replit
·4 小時前
AI agents need room to work and boundaries on what they can reach.
We rebuilt Replit’s sandbox engine around microVMs, giving each sandbox its own Linux kernel.
We break down the decisions behind that architecture: a minimal guest kernel, network controls enforced outside the guest, and credential brokers that let workloads make authorized requests without receiving reusable account credentials.
推文來源 · X (Twitter)在 X 參與討論