A zero-trust hardened container sandbox for executing untrusted AI code. Powered by Linux namespaces, strict seccomp syscall filters, and read-only rootfs with sub-millisecond cold starts.
CLI one-click launch, package managers, and Cordis integration
$ pnpm add @deepseek-ai/dsh-sandbox-gungnirGuaranteed by TypeScript compile-time contracts, inter-plugin event bus calls enjoy zero-drift safety.
Supports dynamic runtime mounting and graceful unloading without restarting the primary host process.
Embeds multi-phase execution lifecycle guards, preventing context loss during long-horizon reasoning.
Designed for lightweight cross-platform environments, booting instantly across Node.js, Bun, and Deno.
Instantiates an isolated namespace with read-only rootfs and writable OverlayFS.
Applies strict seccomp-BPF filters blocking privileged kernel system calls.
Executes target scripts bounded by strict memory, CPU, and egress quotas.
Collects standard outputs and generated artifacts before destroying the jail.
| Parameter | Type | Default | Description |
|---|---|---|---|
| memoryLimitMb | number | 1024 | Maximum memory limit in megabytes |
| allowInternet | boolean | false | Allow outbound internet egress |
| timeoutSeconds | number | 120 | Execution timeout limit before SIGKILL |
Relies on microkernel lifecycle guards and fault-tolerant state machines for continuous reliability.
Native integration with SWE-bench workflows, automatically capturing diffs and verification metrics.
Separates reasoning from tool actions to independently locate and refactor multi-file codebases.
Safely orchestrates events across sandboxes to seamlessly link enterprise developer tooling.
Strictly isolate sub-process calls and network scope; deploy within Docker containers in production.
Configure adaptive exponential retries with strict timeouts to mitigate upstream model rate limits.
Persist state machine snapshots to survive hardware interruptions and resume instantly without loss.
Enable full trace logging, aggregating reasoning thought streams and tool I/O into your observability hub.
Increase the timeout parameter inside your YAML configuration and dispatch periodic heartbeat signals across the Cordis event bus. For long-running tool execution and model reasoning, configure persistent session snapshotting so suspended tasks can safely resume their exact context after interruptions, preventing the kernel from recycling active agent sessions prematurely.
The harness runtime natively provides end-to-end streaming hooks while its state machine automatically intercepts and strips <think> reasoning tags from model responses. Subscribe directly to the onThink event listener to consume live reasoning token streams in real-time, delivering typewriter animation to the user interface while persisting full trajectories for audit compliance.
Cordis microkernel uses directed acyclic graph topological sorting to dynamically resolve plugin dependencies. When shared services or runtime versions conflict, assign distinct isolated namespaces at the application entrypoint. Leveraging context injection alongside lazy activation ensures dependencies load strictly on-demand when tools are triggered, maintaining system stability and preventing memory bloat.
Combine isolated container sandboxing with fine-grained capability checks to prevent plugins from accessing sensitive files or unauthorized external networks. Enforce explicit runtime system call whitelisting through the microkernel, executing all third-party tool scripts inside isolated ephemeral containers to block arbitrary code execution and eliminate security privilege escalation risks entirely.
A bidirectional safety firewall and policy enforcement proxy for DeepSeek Harness. Prevents prompt injection, redacts sensitive PII data, and intercepts dangerous CLI operations in real time.
A zero-latency, client-side WebAssembly execution sandbox for DeepSeek Harness. Runs Python, JavaScript, and SQLite inside isolated Web Workers without backend server overhead.
An automated cryptographic sanitization and ephemeral cleanup guardian for DeepSeek Harness. Securely shreds temporary secrets, wipes memory key remnants, and clears untracked artifacts.