Aotokitsuruya's Technology RadarAotokitsuruya's Technology Radar

WebAssembly

runtimesandbox
Trial

Now in active use as the sandbox for agent-generated code, following the Harness Engineering direction. The isolation is a property of the runtime rather than something the host has to enforce, which turns "let the model run this" from a security problem into a deployment detail — the reason it moved from assessment to real work.

Assess

Assessing it as the sandbox layer for Harness Engineering, where agent-generated or untrusted code needs strong isolation from the host. Pairing WebAssembly with mruby has worked well so far for embedding sandboxed Ruby execution into existing projects — worth tracking how the runtime tooling and language ports mature before leaning on it more broadly.