GoKawiilClaude Code and Instinct run mobile AI agents inside dedicated microVMs
Coding assistants like Claude Code, Instinct, and Poke are shifting from local machines to cloud-hosted virtual machines so they can be accessed from phones. Inspection of Claude Code's setup shows it runs inside a Firecracker microVM with a custom Rust-based init process controlling the session over a vsock connection, while inference calls go out through a locked-down, MITM'd egress gateway to Anthropic's servers.
GoKawiil's interpretation of the reporting above, not reported fact.
As AI agents move off personal devices and into vendor-controlled infrastructure, the security architecture of these VMs becomes critical since the operator effectively lives inside the user's workspace. The heavy isolation measures—read-only system disks, restricted permissions, and single-endpoint network egress—reveal how much engineering effort goes into preventing agent providers or attackers from tampering with or escaping the sandboxed environment.
- Claude Code runs as PID 1 inside a Firecracker microVM booted with a custom Rust init instead of a normal Linux init system.
- User data and provider tooling are split across separate disks, with the harness and skills mounted read-only while user work stays writable and persistent.
- All model inference traffic exits through a single pinned, MITM'd HTTPS gateway with no inbound connections allowed, tightening the security perimeter around mobile agent sessions.
Logitech Keys-To-Go 2 Bluetooth Keyboard — If your coding agent now lives in a cloud VM you drive from your phone, the bottleneck becomes typing prompts on glass. The Keys-To-Go 2 is a slim, foldable Bluetooth keyboard with a built-in cover that pairs with phones and tablets, so you can fire off Claude Code sessions from anywhere. It slips into a bag as easily as the laptop you no longer need to carry.
See Logitech Keys-To-Go 2 Bluetooth Keyboard on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: rohanadwankar.github.io, 2026-09-08
Published there as: “The VMs Powering Mobile Agents (Instinct, Claude Code)”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.