Git-like cloning for MicroVM sandboxes

Clone agent
sandboxes like git

Hardware-isolated MicroVMs with instant boot from snapshots. Snapshot, branch, and fork agent environments the way you'd clone a repo.

$npm i @zeish/computesdk-provider
<120ms
Boot from snapshot
~20ms
Clone latency
Hardware
MicroVM isolation
Git-like
Snapshot · branch · fork

Trusted for high-performance agent workloads

Agent evalsWorkload
SWE agentsWorkload
CI pipelinesWorkload
Tool useWorkload
FirecrackerRuntime
Linux KVMRuntime
OCI imagesRuntime
ComputeSDKAPI

Cloning

From zero to five clones in seconds

Create a sandbox, snapshot it, and fan out parallel clones for agent runs, copy-on-write all the way down. Right-click any node in the canvas to clone, snapshot, suspend, or destroy.

FIG.5 · LIVE CANVAS
Base VMubuntu:22.04Fork Aagent-evalFork A1exp-variant-1Fork A2exp-variant-2Fork Bcode-interpreter
Base VMForked VMSnapshot
Tip: Right-click a node to clone, snapshot, suspend, or destroy

Parent pages stay shared. Each fork only pays for its writes.

Security

Isolation. Hardware boundaries for untrusted agent code

Dedicated MicroVMs, snapshot boot, and serverless-style APIs, so shell, network, and disk stay inside a boundary you control, not a shared container kernel.

Fleet

Real racks, real MicroVMs, not a shared kernel

Every sandbox lands on a physical node running Firecracker or Cloud Hypervisor, its own kernel and hardware-enforced boundary, not a namespace on a kernel your neighbors also touch. The control plane schedules across the fleet; you never see the rack.

Use cases

Where teams put Zeish to work

Six workload patterns that need isolated, reproducible agent environments.

Evals

Agent Evals

Run dozens of evaluation scenarios in parallel, each in a clean MicroVM clone.

Experiments

Parallel Experiments

Clone a baseline and test multiple prompts, tools, or model versions simultaneously.

Security

Secure Tool Execution

Let agents call shell commands and write to disk inside an ephemeral sandbox.

CI/CD

CI for Agents

Every commit triggers an agent run inside a cloned MicroVM, reproducible every time.

Data

Dataset Pinning

Snapshot a VM with a dataset loaded. Clone from that snapshot for identical data.

Runtimes

Sandboxed Interpreters

Safe code execution for LLMs. Python, Node, or any custom runtime in milliseconds.