MXC
Cross-platform sandbox SDK for running untrusted code and model output
What it is
MXC is a sandboxing library that runs untrusted workloads, such as AI model output, plugins, and tools, in isolated containers across Windows, Linux, and macOS. For each platform it chooses a backend, ranging from process sandboxes like Bubblewrap and Seatbelt to LXC, Windows Sandbox, and microVMs, and enforces JSON policies covering filesystem paths, network egress, and UI access. Developers embed it through Rust, .NET, or Node SDKs to run commands or manage persistent containers, and can use debug and audit modes to work out which accesses a policy needs.