Not entirely sure but I know there is a scoping system so the base skills are in opt/hatch/skills/ in the container but some skills are in /opt/hatch/skills-scoped/ in the vm. so all the skills in that container are easily readable but for the other ones i assume they are early access things that only mount for specific channels (user groups)
# skill-scopes.conf -- GENERATED from extensions_scoped.toml. DO NOT EDIT.
#
# extensions_scoped.toml is the single source of truth: each [[skills]] entry
# lists the skill's `scopes`, and this file is derived from them -- one
# `<scope> <directory> ...` line per scope, both sorted for a stable render.
#
# The tokens after the scope are skill DIRECTORY names, not SKILL.md names:
# launch-daemon.sh resolves each against /opt/hatch/skills-scoped/<directory>.
#
# launch-daemon.sh reads this at cell boot and reveals only the gated skills
# whose scope matches the VM's JARVIS_CD_CHANNEL. An unset/unknown channel or a
# missing line reveals nothing (fail-closed). Edit the manifest, not this file.
hatch-e2e ads_mcp health nutrition
hatch-evals ads_mcp health nutrition
internal-test ads_mcp audio_notes_read documents end-call health nutrition polymarket price-tracker
prod granola notion whatsapp
This is a follow up from an earlier discussion on agent sandboxes https://news.ycombinator.com/item?id=49605644 which happened prior to the release of Muse so this time I'm sharing my notes on it.
Muse has a lot of cool things visible through the VM worth talking about (safety classifiers, cloud-hypervisor instead of firecracker, eager compaction, and an interesting rescue system, memory in postgres).
Just started using it today so pretty excited to put it on some harder problems and see how it goes :).
> Private communications on Bevy governance direction make people no longer trust governance
Thought this was an interesting line, though I definitely don't have enough OSS experience to understand it concretely, but seems like these type of questions are applicable beyond OSS.
Woah so cool! A bit tangential but I think a lot of us on HN are open source fans, do you have advice on how to find an open source idea which has potential to grow into a large project like yours?
yes i havent tried out the rest of them, i learned about the space mainly just by poking around these 2 agents that I use. It seems very fun though since theres lot of optimization problems at play. Ill check out your one too would be cool to see what apples virtualization framework is like!
well to be fair this was just what i could reach inside the sandbox by grepping around if they are doing something else behind the api i wouldnt be able to see it
in guessing the most important thing to get right for their target usecase is the computer use and from the tools i saw for that the computers they provision were requestable by the subagents so probably something cool going on there
I took a look inside the VMs that a couple of the agent platforms are using.
TLDR is they use firecracker with memory in git.
I'm a big fan of the memory in git part it would be cool to see how the git history looks after I use it for a longer period of time.
This is my first blog, I'm trying to document things publically as I learn, next I'll look more closely at the providers they are using under the hood (eg. e2b) so feel free to give advice on what to look for!
my thoughts is that Firecracker might be not the best runtime for that, as it’s very minimal on devices it wants to support (famously no PCI out of the box)
reply