Replit details microVM sandbox rewrite completed in recent months

In a November 4th retrospective with no exact completion date given, Replit says each sandbox now gets its own Linux kernel on Cloud Hypervisor and KVM after a rollout finished in the preceding months.

By · Published · Updated

Primary source: Hacker News

Why it matters

Agent products are moving from demos into customer clouds, where a shared-kernel container escape can expose other workloads and credentials. Replit is rebuilding its execution layer around hardware isolation while trying to keep sandbox starts near 500 milliseconds.

A circuit board holds several rectangular metal components, with “RW” printed on its edge.

Amjad Masad wants anyone to be able to create software, regardless of place or economic status. Masad wrote that Replit would "bring the next billion software creators online". That mission depends on the isolated computers where Replit's agents build software for people who may never write code themselves.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.