Sandboxing on Bass and Byteshttps://damianogiorgi.it/tags/sandboxing/Recent content in Sandboxing on Bass and BytesHugoen<a href="https://creativecommons.org/licenses/by-sa/4.0/">(CC BY-SA 4.0) © 2025 Damiano Giorgi</a> Hosted on <a href="https://damianogiorgi.it/articles/2025/09/hugo-s3-cloudfront/"> CloudFront + S3</a>Fri, 25 Sep 2026 10:00:00 +0200Running AI Agent Sandboxes on AWS Lambda MicroVMs: A Lead Role in a Cagehttps://damianogiorgi.it/articles/2026/09/running-ai-agent-sandboxes-on-aws-lambda-microvms/Fri, 25 Sep 2026 10:00:00 +0200https://damianogiorgi.it/articles/2026/09/running-ai-agent-sandboxes-on-aws-lambda-microvms/Lambda MicroVMs give you a stateful Firecracker VM with a real shell. Both Hermes and OpenClaw turn out to have first-class extension points for a custom sandbox backend, so here is what plugging one into the other would actually look like, what it costs, and where it bites.