Author here. I know there are other projects like Daytona, E2B etc. None of them works with K8s though. Firecracker requires KVM nodes and husk pods to work. There is also the kubernetes-sigs/agent-sandbox project which is similar at a first glance.

So I understand there might come doubts in the comments on whether this is useful but I think the fact that one can run scalable sandboxes for untrusted code on Kubernetes making use of Firecracker and CoW is pretty neat (also for running sub-agents and providing them all the context).

Very interested in any kind of feedback at this stage.