smolvm
Adapt smolvm execution to the portable Fabric sandbox contract, which suits a deployment where a full container is too heavy.
Community blueprint, no shipped adapter. TechFabric Harness does not ship or certify an adapter for smolvm, and nothing here is covered by the conformance suites.
fh add smolvmscaffolds a project-owned adapter that you implement and validate yourself withvalidateSandboxAdapter(). See the target matrix for what is shipped.
Run fh add smolvm. The versioned recipe creates a managed RemoteSandboxApi adapter and its
contract test. Map the current smolvm client into Fabric's shell, binary file, working-directory,
environment, timeout, cancellation, and cleanup operations.
Keep credentials at the trusted runtime boundary. Declare the actual filesystem, process, and
network isolation the provider supplies; apply Fabric capability policy as an additional boundary.
Only emit a portable sandbox reference when a different process can securely reconnect to the same
VM. Run validateSandboxAdapter() and a real create/execute/abort/cleanup smoke before production.