Coop launches isolated VM environments for running Claude code and Codex
agents claude
| Source: HN | Original article
Coop introduces isolated virtual‑machine environments built to run Claude code and Codex.
Coop has launched a new feature that lets developers run Anthropic’s Claude Code and OpenAI’s Codex inside fully isolated virtual machines. The “Isolated VM Environments” spin up a dedicated kernel, filesystem and network stack for each AI agent, then shut down in under 100 ms. Built in pure Rust and compatible with OCI containers, the environments run locally first, meaning no cloud round‑trip is required.
The move addresses a growing security concern around AI‑driven code assistants. As we reported on 7 September, a single flaw in GitSpawn allowed untrusted repositories to execute code in Claude Code, Codex, Cursor and Grok, exposing developers to potential supply‑chain attacks. By sandboxing agents in their own virtual machines, Coop ensures that an AI assistant cannot reach other projects, personal files or network resources on the host system. A user who has been testing the feature described it as “super convenient for my use case – letting agents go on with no access to my other projects or personal files,” and recommended it to anyone needing stricter boundaries.
Beyond security, the rapid boot time and OCI compatibility make the solution attractive for everyday development workflows. Teams can spin up disposable agents for tasks such as automated refactoring, test generation or dependency analysis without compromising the integrity of their codebase.
What to watch next is how quickly the feature is adopted across IDEs and CI pipelines, and whether other AI‑tool providers follow suit with similar sandboxing. Industry observers will also be keen to see formal security audits of Coop’s Rust‑based VM implementation, and whether the approach scales to larger models such as GPT‑6 Astra, which OpenAI recently rolled out to its enterprise customers. If the isolation proves robust, it could become a new baseline for safe AI‑assisted programming.
Sources
Back to AIPULSEN