Live data from Hacker News

Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

tilde.run

61–70 of 147 posts

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#62

Back in the 1970's when versioned filesystems were invented, they provided a recovery path for when a file was improperly changed or deleted. Now, in the age of LLMs that go rouge, I can see why they would become popular again.

Oh VMS, How I miss thee

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#63
post #38

Nice, I think that's pretty neat. Do you have an idea where to take this further? I.e. for the filesystem it's great but what if you need to touch external systems that keep their own state?

In a perfect world, every system and external API would expose a standardized interface for versioning its own immutable state, so you'd be able to rollback and time travel across multiple such systems. Not sure what else we can do in this world other than tightly control outbound requests and provide enough visibility into those requests for a human|agent to try and undo changes. Happy to hear your thoughts - what w…

Yeah tbh I think this might be close to impossible to do as it probably 1) requires alignment that every stateful system needs a rollback capablity 2) it needs to be standardized which will probably take a minimum of 2 years after consensus (and that's probably conservative).

I'd love to learn more on how egress can be handled securely in sandboxes, and in general also ingress as this has some security impact - as soon as you allow reading from an external system you open up a new threat vector. Curious to understand whether you have any strategy for network access?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#64
post #49

It was a nice surprise seeing your post on the first page of HN Oz, congrats! If I understand correctly what Tilde is doing is extending the concept of the sandbox in an operating system - filesystem, to data too. So this is a sandbox environment someone would use for data heavy agentic workloads, is this correct?

Hey! It doesn't necessarily have to be "data heavy", but any form of state (from code to binary files) that an agent might use for automation.

Agents are really good at interacting with files and directories (text in, text out!). This adds a layer for those that allows managing that state in a transactional, versioned way.

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#65
post #51

I was trying to build an agent. None of the sandboxes out there had solved the filesystem problem. I want my agent to have a persistent storage, and that stays forever. Like a human with a computer. When the agent spins up again, it has access to the computer with the same files. I had to create my own setup using aws s3 filesystem and docker for this. Does Tilde solve for this?

Snapshotting a filesystem is trivial with e.g. btrfs. You can hook snapshot creation in your agent. That is a single one liner of btrfs subvolume snapshot, in a single hook configuration file, ready to be valued at $10B as quantum agentic versioned sandbox startup.

Part of the appeal (subjective, I know) of versioning is stuff like human-in-the-loop approvals. Think of a pull request: a change is requested by an agent, a human approves, changes get merged atomically. Even if other changes were applied since creation.

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#66
This is an excellent idea who's time has come.

But this is too vague for me. I'm not seeing my questions answered in the landing page or FAQ either.

E.g.,... what's the pricing?

How does atomic commit really work? E.g., if one write to S3 succeeds but the update to a git repo fails?

Does this use optimistic locking or something else? What happens if I commit changes to a resource that was updated since it was imported?

Where/how is it hosted?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#67

If an agent deletes something important (e.g. database), can you undo it? Does it automatically backup before making changes?

If that database is stored on the transactional filesystem available to the sandboxes, yes! Instead of backing up, it utilizes an efficient snapshot mechanism (lakeFS under the hood).

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#68
post #46

How does the scale? For example if I were to have hundreds or thousands of concurrent agents running with some parts of their data pulled out of shared state and other parts custom to that particular agent run and I wanted all of this to be preserved for future collective or individual agent use later, is this a reasonable primitive for that problem space? Or is this more for a situation what you have one or a small…

it should absolutely scale to that. The filesystem is backed by lakeFS, where every sandbox automatically branches out, and mounts that branch. so you get isolation from lakeFS and the scale of an underlying object store (S3, in Tilde).

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#69
I'm far from an expert on the field or in computer science, but from my limited perspective I don't see the need for sandboxing - after thousands of claude code interactions it never did nothing wrong that was serious, at all. If I understand this all correctly, lakeFS would be useful for versioning huge dataloads - but it's not my case: for my usecase I use dura and that's plenty, and for more serious projects where I want not only to version changes but also to 'journal' them, I use github. Also I don't understand one thing: this is like a different client? The website shows a screenshot of "Claude Code" that is not claude code at all, or is modified - that's not a terminal. Am I tripping in anything I said?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#70
post #61

Does this interact with sql or only fs?

It provides a filesystem abstraction, which agents are really good at interacting with. Because it's just a POSIX filesystem - you can put a sqlite database directly on it and get those same transactional capabilities for that too.
Post reply on HN