Edera

Give AI agents disposable, snapshot-and-fork sandboxes on Kubernetes you own. Edera supplies the isolation, identity, and state primitives underneath.

A 2x2 framework sorting sandboxes into four markets-development vs production, self-hosted vs managed-to help you pick the right one for the job.

We benchmarked Sysbox against privileged containers and found 267% more reachable kernel operations. See the data and what to do about it.

Think ITLFのフェローとドコモイノベーションズのCEOの両名に、オープンソースへの貢献を増やすためのアイデアを語ってもらった合わせて、イベント会場内で撮り集められた写真を紹介する

OpenAI issued an update to its ongoing investigation into its models that broke containment, revealing it was even worse than we thought.

Both major AI labs' models broke containment, escaped onto the internet, and hacked other companies. If a human had done that, the law would likely be against them. But a bot?

If the generative AI giant had followed well-known security best practices, it's likely that its AI agent would never have escaped to the open internet and hacked multiple companies.

Edera makes Xen dom0 NUMA-aware and teaches its PV I/O drivers to place rings, IRQs, and kthreads on the right node - closing the NUMA gap for good

Xen's PV I/O drivers leave dom0 NUMA-blind: grant tables map guest RAM with no node info, costing every zone cross-socket latency.

Why the next security frontier for AI is not the model - it is the infrastructure the model is allowed to touch.