Skip to content

FI6: WASM tool sandboxing (wasmtime feature) #22

@frisbeeman

Description

@frisbeeman

Status: Future idea, not scheduled. Lives in the v0.5+ ""maybe"" bucket of the roadmap.

Summary

Use autoagents's wasmtime feature to execute tool code in WASM sandboxes for untrusted-tool use cases.

Why this matters

Some deployments need to run tools whose code they don't trust (user-uploaded, plugins). WASM sandboxing is the cleanest answer.

Why not scheduled

Niche feature with large implementation complexity (security, performance, deployment). Defer until there's a clear use case.

Open questions

  • WASI vs. component model?
  • Performance overhead acceptable for typical tools?

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestfuturev0.5+ future idea, uncommitted

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions