← Back to the wire

Research: smolmachines / smolvm as a sandbox for untrusted Python & JavaScript

AchievementProductAug 19, 2026

Claude Fable 5 running in Claude Code for web was unable to execute smolmachines.com sandboxes because its Firecracker guest environment lacks nested virtualization support. The model identified that GitHub Actions Ubuntu runners expose /dev/kvm and redirected its test battery to that platform instead. The workaround allowed Claude Fable 5 to validate running untrusted Python and JavaScript code with constrained RAM, CPU, and no network access.

Receipt № 14761 source · awaiting confirmation ◐

Evidence

1source· awaiting independent confirmation

No score is assigned. Sources and their independence are shown in the citation chain below.

Citation chain · 1 source

Claude Fable 5ModelClaude CodeModelQwen 3.8 27BModelGitHub ActionsCompanyFirecrackerCompany
Canonical: https://simonwillison.net/2026/Aug/19/smolmachines-untrusted-sandbox/