Your eastern european users will have some interesting results when googling for this

for those of us who don't speak "eastern Europeans", can you tell us what it means?

It is just ks is same as x.

I mean honestly if you pronounce the name it is going to sound like that outside eastern europe too, so I am not sure about that name choice at all. Intentional?

Looking at the website it looks like a vibecoded joke, but what do I know.

I mean it is described somewhat succinctly no? Potentially untrusted tools are isolated from the rest of the system - there were recently some cases of skills for openclaw being used as vectors for malware. This minimizes the adverse effect of potential malicious skills. Also protects from your agent to leaking your secrets left and right - because it has no access to them. Secrets are only supplied when payloads are leaving the host - i.e. the AI never sees your keys.

And what do those tools access? How? If I ask the agent to edit a CSV file, what’s the actual workflow? What prevents it from editing a different file due to a prompt injection attack?

Or you design the sandbox so smartly that is seamless...

Yes exactly, keys are only injected at host boundary

Idk this seems to be gaining momentum and with devs being able to leverage their skillset via vibe coding anything seems possible really.

They do verifiable inference on TEEs for the open source models. The anthropic ones I think they basically proxy for you (also via trusted TEE) so that it cant be tied to you. VPN for LLM inference so to speak.

Can you link to the verifiable inference method?

I think the guys who are developing this (Illia Polosoukhin of "Attention is all you need") and others knows enough to leverage their skills with AI vs. producing slop

Fun fact: it's being developed by one of the authors of "Attention is all you need"

worth mentioning an additional credential/or-not, the creator of "the platform powering the agentic future" (blockchain) https://www.near.org/

which explains why this tool requires a NEAR AI account to use

I mean, it's literally a repo belonging to NEAR AI.

It's a hardened, security-first implementation. WASM runtime specifically is for isolating tool sandboxes

WASM has issues with certain languages, why WASM and not OCI?

Docker is not a security boundary?

That's defined in context, security is a spectrum with tradeoffs

OCI supports far more and has a much bigger ecosystem