Shared by design
Skills, MCP servers, git repos, and a common data store — declared once in the workspace layer, present on every machine, for every human and every agent.
ssh
agent
memory
~> ssh acme-dev1
workspace acme · 3 agents running · you left 2h ago
~> claude --dangerously-skip-permissions
safe here. worst case: this VM.
Sandboxes that feel like real computers.
Full NixOS machines for every developer and every agent — isolated, reproducible, always on, and sharing a memory of every session.
Fig. 1 a devbox workspace
host · bare metal
vm · dev1alice + agentsisolated
vm · dev2bob + agentsisolated
vm · cibackground runsisolated
/workspace/shared — repos · data · skills · session memory
One workspace layer. Machines, tools, secrets, memory — a full environment for every developer, and for every agent. The workspace you own.
Agent-native development has had two options. Both required compromise.
Agents on your laptop
Full power, but at a cost
- Everything exposed — your keys, your browser, your files
- One bad command away from a wiped machine
- Sessions die when the lid closes
- One computer — the agent works, or you do
Containers and cloud IDEs
Safety, but at a cost
- Crippled runtimes — containers pretending to be computers
- Per-seat rental that never ends
- Cold starts — every session begins from zero
- Someone else's cloud holding your code and secrets
For the first time, hard isolation, real machines, and shared memory in one workspace.
Real machines
- Full NixOS VMs — not containers
- Always on — work continues after you disconnect
- SSH, Tailscale, mosh from anywhere
Hard isolation
- VM boundary — agents can't reach the host
- Keys never enter the VM
- YOLO mode, actually safe
Declared in Nix
- The whole system as code
- Bit-for-bit rebuilds — no Docker, no drift
- A new machine in seconds
Shared memory
- Every session captured — all developers, all VMs
- Plain-language search across the whole team
- Agents recall past decisions on their own
Agents, preinstalled
claude-code, codex, opencode, and pi arrive preinstalled and auto-updated. VS Code and Zed connect over Remote-SSH out of the box.
Purpose-built for small, serious teams.
For consulting firms
One isolated workspace per client. Code, secrets, and session history never cross between engagements.
For tiny teams
Real infrastructure — SSO, git hosting, CI, build caches — without hiring an ops team to run it.
For SMB AI teams
Every developer and every agent gets the same machine, tools, and memory from day one.
runs where you want
Managed bare-metal in our datacenter
On-prem inside your own network
Your cloud — AWS, GCP, or Azure
One workspace your team and its agents can actually share.
Spin one up, invite people and agents, and never lose the work.