technology
Introduction
A VPN for every agent: each AI agent gets a network of its own, and every connection it makes is checked, routed and recorded. VPN Works is a project to build that …
Alpha: a working engine on Linux, sealed and tested
A VPN for every agent
Each AI agent gets a network of its own. You choose where its traffic goes out and where it may go, and vpnw records every connection it makes.
3.6 MB
The whole engine: one Linux binary, with no daemon and no third-party code
14 of 14
Ways out of the sealed sandbox tried, and all blocked. IPv6 still to be tested
24 of 24
Deliberately planted bugs caught by the tests
About 1 ms
Added to each new connection in a sealed run
Measured on the Alpha on one Linux machine with 2 CPUs. The Beta measures every number again on more machines, with real agents.
Articles and case studies
technology
How It Works
The idea. Seal each agent in a sandbox whose only way out is vpnw. vpnw checks every connection against a policy, sends it down the path you chose and records it. The …
case studies
Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run
A coding agent needs the network to do its job. It reads repositories, downloads packages, files tickets and reports back. It also reads text written by strangers, and …
case studies
Office Route Case Study: Ticket Filed Through the Office Exit, With the Deploy Token Still Blocked
Some of an agent’s work lives inside a company network: an issue tracker, a package mirror, an internal API. The usual way in is the company VPN, and it takes the …
case studies
Sealed Sandbox Case Study: A Script That Ignores Proxy Settings Tries Three Ways Out and Finds None
A proxy setting is only a request. Most programs honor HTTPS_PROXY, and a policy enforced at the proxy works for them. A program that has been told to leak something has …
case studies
Cloud Metadata Case Study: Request for Instance Credentials Blocked Before Any Connection Is Made
Every major cloud runs a metadata service at the same address, 169.254.169.254, reachable from inside each virtual machine. Among other things it hands out the …
next uses
Next Uses: Seven Places Where a Network per Program Could Fit
The four case studies share one pattern. A program that runs on its own, and can be talked into things, gets a network of its own: one way out, a path chosen for it, a …
Get in touch
Teams running AI agents who would like to try the Beta on their own machines, and anyone with a question or a setup the project should test, are welcome to write.