用纯 Rust 打造的轻量微虚拟机沙箱，让 AI 代理在拥有独立内核、文件系统和网络的隔离机器上运行，启动不到 100ms，本地优先且兼容 OCI。
按需拉起带浏览器和终端的 Firecracker 微虚拟机，交给 AI 代理直接操作，为计算机使用类智能体提供隔离的真实 Linux 沙箱。
…z Move to PATH sudo mv temps /usr/local/bin/temps Firecracker sandboxes only: temps firecracker setup looks for the guest agent next to the temps binary sudo mv temps-vm-a
…security vulnerabilities reported by Dependabot - firecracker: Say why micro vm deployments are refused ([ 1676](https://github.com/gotempsh/temps/issues/1676)) The comple
…z Move to PATH sudo mv temps /usr/local/bin/temps Firecracker sandboxes only: temps firecracker setup looks for the guest agent next to the temps binary sudo mv temps-vm-a
…sts; Ruff lint and formatting checks. Libkrun and Firecracker were unavailable on the macOS qualification machine; their ELF artifact was build- and checksum-verified, wit
…z Move to PATH sudo mv temps /usr/local/bin/temps Firecracker sandboxes only: temps firecracker setup looks for the guest agent next to the temps binary sudo mv temps-vm-a
… as root , where before it did not. Confining the Firecracker VMM requires privileges that enabling KVM does not grant: mknod to create the sandbox's /dev/kvm , chown to h