Submilli

Secure runtime for code-mode agents. Each program an agent writes runs in its own WebAssembly sandbox with its own files, memory, time and token limits, and sandboxes start in under a millisecond. Permissions are checked outside the model on every call and go down to the operation, the resource and the argument values, and anything without a rule is denied. Runs are durable: after a restart they resume where they left off, without repeating finished steps.