DJ Sampath Praises Meta's Muse Agent Sandbox Design
DJ Sampath says Meta's Muse agent gets its sandboxing largely right, citing a per-user virtual machine, credential isolation, a second approval agent named Sentinel, and a full audit trail. He notes Cisco has provisioned microVMs for over 80,000 employees and plans to scale the approach to users.
Original post · 1 min read
- Every user gets their own VM.
- The agent never sees a password.
- A 2nd agent (Sentinel) has to approve anything that leaves the box.
- Every action is in the audit trail.
That's the most careful consumer agent sandbox I've used.
I don't know if folks realize but a VM for every user, at Meta scale, is kinda huge! It's never been done before where we simply provision a linux microVM for every single consumer.
We recently did this within @Cisco for over 80,000 of our employees. And now within our products as well as we start to scale it out to every single one of our users.
1/n