Infra & sandboxes

Stories

• Cloudflare OS: an open platform for agents, apps, and work (Cloudflare)

  Cloudflare blog · 516 points on HN · Story page

  Cloudflare positions an open platform for agents, applications, and work.

• Quantifying infrastructure noise in agentic coding evals (Anthropic Engineering)

  Anthropic engineering post · Story page

  Runtime configuration moves agentic coding benchmark scores by several percentage points, sometimes past the gap between leading models.

• llama.cpp PR 26291 parallelizes RPC model loading, cutting a 300 GB load from ~5 minutes to ~1.5 (r/LocalLLaMA)

  Reddit thread · Story page

  Parallelizing part of RPC model loading took the author's 300 GB load from nearly five minutes to about a minute and 38 seconds on 12 threads.

• Managed Deep Agents: the fastest way to ship a production deep agent (LangChain)

  LangChain blog · Story page

  A hosted runtime with durable execution, sandboxes, tool access, and tracing, in private beta.

• How we contain Claude across products (Anthropic Engineering)

  Anthropic engineering post · Story page

  The most detailed first-party account so far of how a lab limits an agent's blast radius: sandboxes, virtual machines, and egress controls as containment boundaries. The argument worth reading is that repeated permission prompts create approval fatigue, so you constrain what the agent can do rather than lean on a human watching every step.

• Devin Outposts run on Vercel Sandbox microVMs (Cognition)

  X post · Story page

  Devin can now run inside isolated Vercel Sandbox microVMs, with Docker support, VPN access to private networks, and resume-from-snapshot that restores the repo, dependencies, and build state.

• Sandboxing agents at the OS level in Zed (Zed)

  Zed blog · Story page

  OS-level sandboxing that limits what an agent can reach through its terminal and fetch tools.

• LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection (Johann Rehberger)

  blog post · Story page

  A red-team walkthrough of LiteLLM as a high-value gateway target, with the signals defenders can watch for during authorized exercises.

Issues that covered it