Trail of Bits' Coop runs Claude Code and Codex in disposable VMs
The Apache-2.0 CLI boots agents into Firecracker or Lima microVMs with full tool access — plus Engrim, a local memory store that follows you across CLIs.
Copy markdown
Disposable VMs, real tool access
Coop is a Rust CLI from Trail of Bits that spins up throwaway VMs where Claude Code and Codex get Docker, git, compilers and package managers — with nothing touching your host. On Apple Silicon it uses Lima over Apple's Virtualization.framework; on Linux, Firecracker microVMs over KVM. Run `coop up`, then `coop claude` or `coop codex`, and `coop destroy` when you're done. It's the sandbox answer to this week's malicious-repo and browser-agent scares. Apache-2.0.
Engrim: memory that survives an agent switch
Engrim is a local-first SQLite memory engine (MIT) that persists your project's decisions across Claude Code, Cursor, Windsurf and Antigravity, then hands each new session a ~4K-character boot pack instead of reloading the whole history. Retrieval is hybrid FTS5 keyword plus vector search, entirely offline in ~/.engrim/memory.db. Install with `pip install engrim`, wire it up with `engrim setup --all`, or run it as an MCP server via `engrim serve --mcp`.
Elsewhere: speculative decoding comes to AMD
vLLM now documents speculative decoding on AMD Instinct MI300X and MI355X, reporting 2.2–2.9x throughput on models like Gemma 4, Qwen3.5-122B and Kimi-K2.5 using methods such as MTP, EAGLE-3 and DFlash — turn it on with the `--speculative-config` flag. Worth a look if you self-host on ROCm.