Story · Vercel
Introducing Run SDK: secure eval for your agents (Vercel)
blog post · Story page
Vercel's Run SDK executes agent-written JavaScript or type-stripped TypeScript in a fresh QuickJS context inside a worker thread, with no direct route to Node.js or the network. Your app exposes chosen operations as host functions, and a run can pause for auth or human approval and resume without redoing finished work.
In plain words
- Vercel released a software package for running code written by software assistants without exposing the surrounding application or computer.
- It places each JavaScript or TypeScript program in a fresh isolated space with no direct network or Node.js access.
- The application chooses a small set of allowed operations, while database passwords and other secrets stay outside.
- Execution can pause for identity checks or human approval, then continue without repeating completed work.
- This could let developers use generated programs in real applications while limiting damage and requiring approval for sensitive actions.
Appeared in
- Compaction erases agent safety rules, and CLAUDE.md prose isn't a control
Aug 26, 2026 · in the sections
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.