Replit rebuilt its sandbox engine with microVMs

Automated excerpt

Containers still separate processes inside each sandbox. Our previous runtime used Linux containers, which share the host kernel. With microVMs, compromising a sandbox’s guest kernel does not by itself compromise the host kernel.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.