Axern is an open-source infrastructure platform for running AI agents and code in isolated, stateful sandboxes with a unified control plane and multiple runtime backends.

Stars

30

7-day growth

No data

Forks

1

Open issues

0

License

Apache-2.0

Last updated

2026-07-29

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It provides a comprehensive, production-oriented sandbox platform with durable control plane, runtime choice, real data-plane access, and agent execution with evidence, all under one resource model.

Who it is for

  • Teams building AI agent platforms
  • Developers needing isolated code execution environments
  • Platform engineers seeking sandbox infrastructure for multi-tenant workloads
  • Researchers evaluating stateful agent sandboxes

Use cases

  • Running AI agent tasks with trajectory and evidence capture
  • Executing untrusted code in isolated sandboxes with process streams and files
  • Creating ephemeral development or testing environments with network services
  • Deploying cloud-neutral sandbox clusters via Helm or Docker Compose

Strengths

  • High-performance sandbox with runc/runsc runtime choice
  • Durable PostgreSQL-backed control plane surviving restarts
  • Real data-plane access: process streams, HTTP services, SSH terminals, reverse tunnels
  • Local-to-cluster continuity with same service boundaries

Considerations

  • Pre-1.0 and under active development, not production-ready for multi-tenant
  • Requires Docker, Kubernetes, or Linux; macOS only via Docker Desktop
  • No built-in multi-tenant security guarantees; must review auth/TLS/network policies

README quick start

Axern

Documentation · Quickstart · SDKs

Axern is open-source agentic infrastructure for running AI agents and code in isolated, stateful sandboxes. It is designed as a high-performance sandbox platform with one resource model for creating environments, executing processes, exposing services, attaching storage, opening reverse tunnels, observing lifecycle state, and retaining task evidence.

Axern is designed for teams that need more than a code-execution RPC: the control plane, node runtime, gateway, image path, SDKs, and agent harness share the same identity, lease, cleanup, and observability contracts.

Project status: Axern is pre-1.0 and under active development. It is suitable for evaluation and contribution, but operators should review the security and production boundaries before deploying multi-tenant workloads.

Why Axern

  • Sandbox as the primitive: runs, services, functions, coding workspaces, and agent tasks compose the same execution and lifecycle APIs.
  • Durable control plane: PostgreSQL-backed intent, placement, leases, retries, health, cleanup, and storage state remain authoritative across process or node restarts.
  • Runtime choice behind one model: runc and runsc workloads use the same public APIs; OCI and Nydus image paths converge at the node runtime. The resource model remains independent of a single sandbox backend.
  • Real data-plane access: process streams, files, archives, HTTP services, SSH-compatible terminals, and reverse TCP tunnels are explicit capabilities.
  • Agent execution with evidence: Axrun runs external agent bundles, verifies results, records trajectories and usage, and preserves typed artifacts.
  • Local-to-cluster continuity: Docker Compose, kind, and the cloud-neutral Helm chart exercise the same service boundaries.

Architecture

flowchart LR
    Client["CLI and SDK clients"] --> Gateway["gatewayd\npublic control and data edge"]
    Gateway --> Control["controld\ndurable intent and placement"]
    Gateway --> Tunnel["tunneld\nreverse TCP relay"]
    Gateway --> Node["axnoded\nsandbox executio

Description

Open-source sandboxes for AI agents, untrusted code execution, and durable services.

Related repositories

Similar projects matched by category, topics, and programming language.

deerwork-ai
Featured
deerwork-ai GitHub avatar

deer-workflow

An open-source Dynamic Workflow runtime that combines deterministic TypeScript orchestration with replaceable Agent runtimes.

AI & Machine LearningLarge Language Models
312
uzairansaruzi
Featured
uzairansaruzi GitHub avatar

hermex

Hermex is a native SwiftUI iPhone app that lets you control a self-hosted Hermes AI agent directly from your phone, with no subscriptions, tracking, or third-party relay.

AI & Machine LearningLarge Language Models
941
mereyabdenbekuly-ctrl
Featured
mereyabdenbekuly-ctrl GitHub avatar

clodex-ide

Clodex is an open-source, local-first agentic IDE that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and governed execution in one Electron workspace, currently in technical preview.

AI & Machine LearningAI Agents
859