thanks

I'd also add that MXC is still sharing the host kernel.

i.e. on mac MXC uses seatbelt, so the agent shares your kernel.

but smolvm gives each task its own VM with its own kernel, same on mac, linux and windows. + additional layers like preconfigured seccomp, landlock, wherever it makes sense