Replit details microVM sandbox rewrite completed in recent months
In a November 4th retrospective with no exact completion date given, Replit says each sandbox now gets its own Linux kernel on Cloud Hypervisor and KVM after a rollout finished in the preceding months.
By RuntimeWire Staff · Published · Updated
Primary source: Hacker News
Why it matters
Agent products are moving from demos into customer clouds, where a shared-kernel container escape can expose other workloads and credentials. Replit is rebuilding its execution layer around hardware isolation while trying to keep sandbox starts near 500 milliseconds.

Amjad Masad wants anyone to be able to create software, regardless of place or economic status. Masad wrote that Replit would "bring the next billion software creators online". That mission depends on the isolated computers where Replit's agents build software for people who may never write code themselves.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.