On Windows today, an agent runs as you.
It reaches everything you can reach.
1 · Process containerWhat can it touch? The same agent run twice; the only difference is policy, and a clinical assistant still does its job.
2 · Isolation sessionWho is it? An agent with a Windows account of its own, and state that survives a restart.
3 · WSL containerWhat world is it in? A Linux container that sees only the folders you mount.
Go furtherYour own Win32 apps and scripts, contained live.
MXC container
MXC PlaygroundMXC 1.0.1
Isolation sessions
WSL containers
MXC Playground
Permissions, not prohibitions.
Enforced by Windowsnot by the agent's cooperation
No change to the agentthe identical binary, twice
Three kinds of boundarya policy around a process, an account of its own, or a Linux container
The work still happensreach removed, capability intact
Click or press → to continue