SkillsHooksPromptsAgentsPersonasModelsPoliciesToolsTemplatesBundlesCategoriesStart here
← Policies
Po policyisolationboundgovernancestable

Ephemeral VM

Single-use VM destroyed on task completion. Strongest practical isolation for untrusted execution.

id policy/ephemeral-vmv1.0.0by convergent-systems-key

Rule

Single-use VM destroyed on task completion. Strongest practical isolation for untrusted execution.
Process
vm
Network
allowlist
Filesystem
tmpfs
Paths
/workspace
Author convergent-systems-key. Source convergent-systems-co/agent-atoms (original ↗). License Apache-2.0. Re-typed from isolation-constraint by scripts/migrate-policy-tool.py.