Sadly, skimming the docs about how the different backends work makes me think that almost this entire project was done by a recent-gen LLM that interpreted its instructions as “make these things work at all costs” instead of “make a considered design that cleanly and securely fits its use case”.
Even the bubblewrap integration docs are basically a stream of consciousness vibe splat. I have approximately zero confidence in the results.
(reposted from the other copy of basically this post: https://news.ycombinator.com/item?id=50026061)
I've watched the project for a while and tried different versions. It all looks very sloppy. And documentation is basically non-existent.
I think it's a good idea to create such an abstraction, but it's still far away from a 1.0 release.
I am really struggling to imagine the abstraction that maps well to both bubblewrap and hyperlight. (They’re both great projects. They solve different problems in different ways, although both fit with the word “sandbox”.)
I’m sure I could come up with an awkward abstraction, but bad abstractions are a bad way to build secure systems.