tilde.run

Tilde gives you three isolation layers every AI workload needs -- storage, compute, and network -- wired together so you can run autonomous code against real data without giving up safety, reproducibility, or oversight.

• Storage is versioned and transactional. Writes happen inside sessions; nothing reaches production until you commit, and every commit is revertible.
• Compute runs in fresh isolated containers with your repository mounted at /sandbox. Spin up an interactive shell, fan out hundreds of sandboxes for batch jobs, or fire them automatically on commit with triggers.
• Network egress passes through a policy-checked proxy. Cloud metadata endpoints, private networks, and off-policy hosts are blocked by default. Every allowed and denied request is logged against the same identity.

The combination is what makes Tilde useful for agents: you can treat any workload -- including code you didn't write -- as a single transactional, auditable unit.