Welcome to RunVero

RunVero is an ultra-fast, deterministic WebAssembly host runtime built on WASI 0.2 (Preview 2) and Wasmtime. It provides an air-gapped, zero-trust sandbox for executing untrusted LLM-generated code and agent tools.

Core Highlights

Sub-Millisecond Execution: Precompiled components instantiate in 0.49 ms (< 500 µs), over 700x faster than Docker container spin-up.
Deterministic Fuel Metering: Instruction-level CPU budgeting ensures infinite loops and prompt-injected recursive algorithms trap deterministically.
Hard Memory Ceilings: Strict host-enforced memory caps (e.g. 16 MiB default) prevent host out-of-memory crashes.
Zero Ambient Authority: Guests have no access to host filesystems, network sockets, or system clocks unless explicitly linked.
Bolt SIMD Secret Redaction: Dynamic token replacement at line speed using SIMD Aho-Corasick pattern matching with zero credential leakage to LLMs.
Multi-Protocol Gateway: Built-in Axum HTTP REST API (/v1/execute) and Anthropic Model Context Protocol (/mcp) server.

Architectural Comparison

Runtime Engine	Warm Start (p50)	Cold Start (p50)	Base Memory	Instruction Metering	Ambient Network
RunVero (WASI 0.2)	0.49 ms	17.67 ms	1.06 MiB	Deterministic Fuel	Zero (Explicit Links)
Docker (Alpine)	~350 ms	~1,200 ms	~45.0 MiB	Wall-clock (cgroups)	Ambient Bridge / NAT
Firecracker MicroVM	~45 ms	~120 ms	~128.0 MiB	vCPU Throttling	Virtual TUN/TAP
gVisor Sandbox	~180 ms	~600 ms	~65.0 MiB	Wall-clock	Virtual Sentry Stack

Next Steps

Quick Start Guide — Install the CLI and run your first sandboxed tool in under 60 seconds.
CLI Reference — Explore flags, execution telemetry breakdowns, and server gateway options.
Python SDK — Integrate RunVero sandboxes directly into LangChain, AutoGen, and Claude agents.
WIT Tool Authoring — Learn how to compile Rust and Python tools to wasm32-wasip2.