@trish7891840
🤓 Latest Submissions
.png&w=828&q=75)
Safecell
An agent that only chats is a demo; an agent that executes is a liability. SafeCell is a web app where a model writes a Python program to do your task and that program runs inside a fresh, disposable cell: its own PID and network namespaces, no access to the host filesystem, no egress, and hard limits on CPU, memory, file size and process count. The container is destroyed after every step, so nothing carries over. Output is captured with a byte cap and scrubbed for credential shapes before it reaches the browser. Each run declares a permission manifest generated from the same policy the sandbox enforces, so what is declared cannot drift from what is enforced, and that manifest's hash is carried in the run receipt. Every event hashes the previous one, so a receipt can be re-verified rather than trusted, and the service refuses to execute at all if the isolation primitive is unavailable. 25 tests cover the boundary, none of them mocking isolation: host paths absent, host writes refused and verified absent, TCP and DNS both failing, secrets never crossing in, key-shaped output redacted, and every resource limit biting. Runs stream live over SSE with the plan, the code, the real output and the receipt. Deployed on a Vultr VM behind Caddy with TLS, with the planner calling Vultr Serverless Inference through any OpenAI-compatible endpoint.
8 Nov 2026
