Tilde · 2026-05-06 · notable
Tilde.run — Agent Sandbox With a Transactional, Versioned Filesystem on lakeFS
Show HN launch of a hosted agent sandbox where every run is a reversible transaction over a versioned POSIX filesystem mounting GitHub repos, S3 data, and Drive docs into one ~/sandbox.

Each agent run is a transaction you can roll back, with code, S3 data, and Drive docs mounted as one versioned filesystem.
Key specs
| Hn points | 151 |
|---|---|
| Hn comments | 105 |
What is it?
Tilde.run is a hosted sandbox for letting AI agents act on real production data without permanent risk. Each run starts in a fresh isolated container; on clean exit changes commit atomically, on failure nothing changes. The sandbox is a real POSIX filesystem so any tool or language works without a Tilde-specific SDK.
How does it work?
The platform is built on lakeFS, the open-source data versioning layer. Code from GitHub, training data from S3, and documents from Google Drive are mounted into a single ~/sandbox path. Tilde then enforces three guarantees on every run — reversibility, isolation, and audit — and every outbound network call is logged, so an operator reviews diffs and decides whether to commit or roll back.
Why does it matter?
Letting autonomous coding or research agents touch real customer data is the unsolved blocker for production agent rollouts. A versioned filesystem with transactional commits gives teams a credible undo button without re-architecting agents around bespoke staging directories.
Who is it for?
Teams running coding or research agents on production data.
Try it
Sign up for the private preview at tilde.run.