We go live on Product Hunt on Tuesday. Before then, I'd love a few people to put the https://kosa8.com/ through its paces:
Post your rough edges, confusing docs or "why doesn't it do X" here. I'll fix what I can before launch and credit you in the changelog. I'll also be here all day on the 20th for questions.
Our take: containers share the host kernel, so for untrusted code a microVM is the safer wall, and kosa8's boot in about 0.5s, so speed isn't the trade-off it used to be.
The counterargument: gVisor and seccomp profiles go a long way, and VMs add complexity.
Every MCP server you add is code running with your permissions: your files, your network, your tokens. Most of us install them from a README and a star count.
Do you read the source? Pin versions? Run them in a container?