Skip to content

FI6: WASM tool sandboxing (wasmtime feature) #22

Description

@frisbeeman

Status: Future idea, not scheduled. Lives in the v0.5+ ""maybe"" bucket of the roadmap.

Summary

Use autoagents's wasmtime feature to execute tool code in WASM sandboxes for untrusted-tool use cases.

Why this matters

Some deployments need to run tools whose code they don't trust (user-uploaded, plugins). WASM sandboxing is the cleanest answer.

Why not scheduled

Niche feature with large implementation complexity (security, performance, deployment). Defer until there's a clear use case.

Open questions

  • WASI vs. component model?
  • Performance overhead acceptable for typical tools?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestfuturev0.5+ future idea, uncommitted

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions