zviz Zig
Research into minimal-overhead sandboxing for untrusted code execution. Lightweight container isolation in pure Zig.
Tag
3 results tagged "sandboxing"
A practical comparison of zviz, gVisor, and Firecracker for sandboxing untrusted AI-generated code — performance, security, and operational trade-offs.
How zviz uses Zig's comptime capabilities to build gVisor-inspired sandboxing with near-zero runtime cost.