Live data from Hacker News

Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

tilde.run

101–110 of 147 posts

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#101
Nice project, but saying "Run AI agents in production without the risk" isn't quite accurate.

Even if some tool makes it impossible for an AI agent to delete things in a way that isn't recoverable, there are other risks such as data exfiltration that need to be managed separately.

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#102

I was trying to build an agent. None of the sandboxes out there had solved the filesystem problem. I want my agent to have a persistent storage, and that stays forever. Like a human with a computer. When the agent spins up again, it has access to the computer with the same files. I had to create my own setup using aws s3 filesystem and docker for this. Does Tilde solve for this?

just get a $5 VPS or hetzner and you are good.

Just run it on your GitHub actions minutes

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#103

Just my two cents: less is more and the first impression matters a lot. I'm saying this because we see a new agent sandbox tool on the front-page almost every day. Most of them have an AI-made landing page design, lots of animations, lots of words. This has become a bad sign for me. I can tell that you put time into it, made a video, and everything, but I guess I'm suffering from some kind of fatigue of having to go…

As someone who is building an AI tool in this category, can you give examples? :)

I've tried to focus more on end-user use-cases in my own product positioning, even though security is absolutely at the top of my list. This was hard to watch because it felt it demonstrated a security feature that is really secondary to the purpose of an agent.

What would be a spin in this AI category that would excite or surprise you?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#104
post #38

Earlier quoted context omitted.

In a perfect world, every system and external API would expose a standardized interface for versioning its own immutable state, so you'd be able to rollback and time travel across multiple such systems. Not sure what else we can do in this world other than tightly control outbound requests and provide enough visibility into those requests for a human|agent to try and undo changes. Happy to hear your thoughts - what w…

Yeah tbh I think this might be close to impossible to do as it probably 1) requires alignment that every stateful system needs a rollback capablity 2) it needs to be standardized which will probably take a minimum of 2 years after consensus (and that's probably conservative). I'd love to learn more on how egress can be handled securely in sandboxes, and in general also ingress as this has some security impact - as so…

That’s the current RBAC implementation: agents by default can make no API calls. the only way for them to contact the outside world is through a forward proxy configured in the sandbox. that proxy only allows making requests to destinations explicitly allowed (host, path, method)

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#105
post #13

Just my two cents: less is more and the first impression matters a lot. I'm saying this because we see a new agent sandbox tool on the front-page almost every day. Most of them have an AI-made landing page design, lots of animations, lots of words. This has become a bad sign for me. I can tell that you put time into it, made a video, and everything, but I guess I'm suffering from some kind of fatigue of having to go…

That's fair. What makes this unique is the versioned, composable filesystem. It's built on top of lakeFS ( https://github.com/treeverse/lakeFS ) so it scales really well, unlike other solutions that try and do this with Git directly.

Is lakeFS an FS....? Zero mention of FUSE or a kernel module at all in the README.

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#106
I had to dig hard to find this is a SAAS sandbox offering not an actual sandbox (the software i can use locally). Its just wasting peoples time, no one needs a non opensource sandbox. There are now at least 3 apache 2 projects (smolmachines, microsandbox, boxlite) working on sandboxes and at least one of them should be ready for primetime soon.

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#107

I was trying to build an agent. None of the sandboxes out there had solved the filesystem problem. I want my agent to have a persistent storage, and that stays forever. Like a human with a computer. When the agent spins up again, it has access to the computer with the same files. I had to create my own setup using aws s3 filesystem and docker for this. Does Tilde solve for this?

Isn't that like working on a codebase with an agent?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#108

The versioned filesystem is exactly what's missing when agents hallucinate and go off the rails. How fast are the rollbacks if an agent completely messes up the directory state?

Wasn't git invented for these kinds of things?

Re: Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem

#109
post #90
post #87

Earlier quoted context omitted.

Doesn't s3 now have versioning + POSIX mounts?

Yep! https://aws.amazon.com/blogs/aws/launching-s3-files-making-s...

Thanks. This is actually interesting. The only downside is that it only works within AWS.
Post reply on HN