smolvm 作为不可信代码沙箱的评估与 GitHub Actions 变通方案
原标题：smolmachines / smolvm as a sandbox for untrusted Python & JavaScript
AI 摘要
Simon Willison 在其博客中描述了一项研究任务：评估 smolmachines/smolvm 作为运行不可信 Python 和 JavaScript 代码的安全沙箱。由于 Claude Code for web 环境不支持嵌套虚拟化，Claude Fable 5 转而使用 GitHub Actions 运行器（支持 /dev/kvm）执行测试，展示了其创造性和主动性。
正文节选
19th August 2026 I tasked Claude Fable 5 running in Claude Code for web with the following research task: Put https://smolmachines.com through its paces as a fast secure sandbox. Explore what it would take to use this to run untrusted Python and JavaScript code in a way that is limited in what RAM and CPU time it can take up (protection against "while true") with no network access and filesystem access only to designated files Goal is to be able to use this to execute user-provided tasks for thi