Alibaba just open-sourced OpenSandbox, and it's already trending on GitHub with 13k+ stars. Real agent infrastructure ships quietly compared to model releases, but it's usually more important. OpenSandbox gives agents truly isolated environments, not just a sandboxed code runner, backed by gVisor, Kata Containers, and Firecracker microVMs, with a Credential Vault so secrets never touch the actual workload. It plugs directly into Claude Code, Cursor, Codex, and Gemini CLI rather than replacing them. Repo: https://github.com/opensandbox-group/OpenSandbox(CyrilXBT)