TIL about Monty. A number of people have tried to sandbox [python,] using python and user space; but ultimately they've all concluded that you can't sandbox pyt

TIL about Monty. A number of people have tried to sandbox [python,] using python and user space; but ultimately they've all concluded that you can't sandbox python with python. Virtual Machines are a better workload isolation boundary than Containers are a better workload isolation boundary than bubblewrap and a WASM runtime. eWASM has costed opcodes; https://news.ycombinator.com/item?id=46825763 https://news.ycombinator.com/item?id=46825763 From "Show HN: CSL-Core – Formally Verified Neuro-Symbolic Safety Engine for AI" (2026) https://news.ycombinator.com/item?id=46963924 https://news.ycombinator.com/item?id=46963924 : > Should a (formally verified) policy engine run within the same WASM runtime, or should it be enforced by the WASM runtime, or by the VM or Container that the WASM runtime runs within? > "Show HN: Amla Sandbox – WASM bash shell sandbox for AI agents" (2026) https://news.ycombinator.com/item?id=46825026 https://news.ycombinator.com/item?id=46825026 re: eWASM and costed opcodes for agent efficiency > How do these userspace policies compare to MAC and DAC implementations like SELinux AVC, AppArmor, Systemd SyscallFilter, and seccomp with containers for example? > [ containers/bubblewrap#sandboxing , cloudflare/workerd, wasmtime-mte, ] "Microsandbox: Virtual Machines that feel and perform like containers" https://news.ycombinator.com/item?id=44137501 https://news.ycombinator.com/item?id=44137501 microsandbox/microsandbox: https://github.com/microsandbox/microsandbox https://github.com/microsandbox/microsandbox : > opensource self-hosted sandboxes for ai agents