The tool safely executes automated coding agents like Claude Code, Codex, and opencode by restricting them to the mounted project directory on an allowlist network tier. Sensitive access tokens are safeguarded on the host machine using a local proxy that injects real credentials into outgoing requests via placeholders. It also incorporates specific macOS protections to block tampering with local Git hooks and repository configurations. Users can initialize setups through devcontainer.json files, pre-built layers like Docker, or standard container images that deploy rapidly using shared read-only toolchains.
Key points
Projects operate inside isolated sandboxes to prevent supply chain threats and rogue agen…: Projects operate inside isolated sandboxes to prevent supply chain threats and rogue agent damage.
Autonomous coding agents run under strict restrictions that limit access to specific netw…: Autonomous coding agents run under strict restrictions that limit access to specific network destinations and folders.
Development environments can be customized or quickly standardized using devcontainer.jso…: Development environments can be customized or quickly standardized using devcontainer.json files and container images.
Sources checked by our analysis pipeline: 1
One VM for every project
An isolated sandbox with your project’s toolchain, ready for you or a coding agent to start coding.
Quick start
# Install devvm, and Lima with it
brew trust --formula devvmhq/tap/devvm
brew install devvmhq/tap/devvm
The install script in the Linux tab also works on macOS, and Installing lists its options.
1. Go to your project
Open a terminal and cd
into any project folder.
2. Run devvm
devvm shows what the new VM gets. Confirm to make it, or customize it.
3. Start your agent
devvm opens a shell in the VM, whose prompt starts with (devvm)
, so start your agent there.
Claude Code needs your Claude login before its first start, which devvm agent login claude
makes from the VM and keeps on your machine (your first VM). The next time you run devvm in the folder, it opens the same VM, and devvm tools
adds an agent to a VM you already have.
What’s supported
Toolchains
devvm
chooses the toolchains your project’s files call for, and you can choose more when you customize…
Following the closure of the digital distribution platform, advocates are seeking legal avenues to preserve affected media. The proposed regulatory relief under federal copyright law aims to ensure consumers maintain access to content when streaming services terminate operations. This effort has drawn considerable focus from communities dedicated to technology and digital preservation.
Content creators can secure an updated hybrid audio setup at a substantial discount across several major storefronts. Designed for streamers and podcasters, this model provides flexible connectivity alongside automated sound processing to minimize manual mixing. The promotion makes professional-style recording equipment significantly more accessible for home studio workflows.
Security researchers have detailed an exploit scenario documented under the PwnEscape disclosure series affecting the hypervisor environment. This ongoing research underscores critical boundary risks inherent to multi-tenant cloud virtualization platforms. System administrators must monitor isolation mechanisms closely to prevent malicious actors from breaking container barriers.