Tag
2 posts tagged with this.
A KVM-based x86_64 userspace hypervisor that runs any Linux ELF binary — static or dynamic, including Python and Node — inside a sandboxed guest VM with configurable filesystem policy, syscall interception, and process snapshotting.
A ptrace-based recording tool that intercepts every syscall made by a process tree — file reads, writes, forks, execves — and stores the full trace in a DuckDB database. File writes can be redirected to a content-addressed store for reproducible builds and sandboxed execution.
All tags