# Isolation (https://jackin.tailrocks.com/research/platform/isolation/)



This collection studies isolation backends and filesystem policies that could strengthen or complement the current container boundary.

<Card title="smolvm backend" href="/research/platform/isolation/smolvm-backend/">
  MicroVM integration shape, operational constraints, and open validation work.
</Card>

<Card title="OrbStack isolated machines" href="/research/platform/isolation/orbstack-isolated-machines/">
  Stronger OrbStack boundaries and their fit with jackin❯ workspaces.
</Card>

<Card title="Apple Container backend" href="/research/platform/isolation/apple-container-backend/">
  Backend design for Apple's container runtime.
</Card>

<Card title="Apple Container landscape" href="/research/platform/isolation/apple-container-1-0-landscape/">
  Current ecosystem evidence, security properties, and implementation signals.
</Card>

<Card title="Ephemeral mount modes" href="/research/platform/isolation/ephemeral-mount-modes/">
  Workspace mount lifetimes and cleanup trade-offs.
</Card>

<Card title="Source-branch policy" href="/research/platform/isolation/source-branch-policy-isolated-mounts/">
  Branch safety rules for isolated mounts.
</Card>