bulkhead-runtime 2026.4.5-beta.7 → 2026.4.5-beta.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/dist/package.json +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -49,6 +49,8 @@ const result = await workspace.run({
|
|
|
49
49
|
|
|
50
50
|
## Use Cases
|
|
51
51
|
|
|
52
|
+
|
|
53
|
+
|
|
52
54
|
### SaaS -- one agent per customer
|
|
53
55
|
|
|
54
56
|
Customer A's agent can never see Customer B's tokens, data, or conversation history.
|
|
@@ -95,6 +97,8 @@ await platform.deleteWorkspace(ws.userId);
|
|
|
95
97
|
|
|
96
98
|
## How It Works
|
|
97
99
|
|
|
100
|
+
|
|
101
|
+
|
|
98
102
|
When `workspace.run()` executes, Bulkhead spawns a **child process** with 5 layers of kernel isolation: user namespace, PID namespace, mount namespace (pivot_root), optional network namespace, and cgroups v2 resource limits. The agent **never runs in your application's process** and **cannot see anything outside its sandbox**.
|
|
99
103
|
|
|
100
104
|
> **[Read the full isolation architecture →](docs/isolation.md)**
|
package/dist/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "bulkhead-runtime",
|
|
3
|
-
"version": "2026.4.5-beta.
|
|
3
|
+
"version": "2026.4.5-beta.8",
|
|
4
4
|
"description": "Multi-tenant AI agent runtime with OS-level isolation. Sandboxed execution, encrypted credentials, private memory per tenant — one server, no Docker.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "bulkhead-runtime",
|
|
3
|
-
"version": "2026.4.5-beta.
|
|
3
|
+
"version": "2026.4.5-beta.8",
|
|
4
4
|
"description": "Multi-tenant AI agent runtime with OS-level isolation. Sandboxed execution, encrypted credentials, private memory per tenant — one server, no Docker.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|