Posts
Keep herdr, give each agent its own microVM
Brig now supports herdr. The herdr profile runs each coding agent in its own Brig microVM and lets one herdr client manage all of them over SSH, with no open port in the guest. A new herdr plugin, herdr-brig, turns the setup into one key: it boots a sandbox for a project, registers it as a herdr machine, and starts Claude Code in it. Another key removes it. This post covers what shipped, how to set it up, and its limitations.
Operating agents safely with short-lived AWS authority
A coding agent that reads AWS will pick up your own SSO session if you let it, and CloudTrail cannot tell its calls from yours. This post builds the alternative with Brig v0.5.1: a dedicated IAM role with a narrow policy, 30-minute keys vended into a microVM by a broker on the host, and an audit trail that joins every AWS call to the sandbox that made it and the developer who started it.
How Brig could have interrupted the Binance attack
Binance's initial incident report names the path a malicious interview repository overwrote on an engineer's laptop. That write is a boundary a microVM sandbox can enforce before anyone knows the code is malicious. This post walks through the Brig v0.5.0 setup that contains it: a disposable guest home, no credentials, an egress allowlist, and a credential broker for the agents that do need an API.