Running autonomous agents inside standard developer machines poses persistent threats of environment contamination. An agent might install malicious npm packages globally, leak environment variables, or corrupt local caches. Bounded authority sandboxes guarantee deterministic, clean execution.
Ephemeral Worktrees vs Full VM Isolation#
SUTRA uses lightweight, ephemeral git worktrees coupled with container isolation. When an agent begins a task, SUTRA provisions an isolated workspace directory. The agent never touches the primary checkout. Upon task completion or failure, the workspace is cleanly reaped.
"If a task crashes or exhibits non-deterministic behavior, SUTRA's Session Reaper Worker terminates the container and revokes the session token within 120 seconds."
Frequently Asked Architectural Questions
#CI/CD#Sandboxing#Docker#DevOps#Bounded Authority