{
    "archive_path": "archive/1791540391.500412",
    "base_url": "github.com/microsoft/mxc",
    "basename": "mxc",
    "bookmarked_date": "2026-10-09 10:06",
    "canonical": {
        "archive_org_path": "https://web.archive.org/web/github.com/microsoft/mxc",
        "dom_path": "output.html",
        "favicon_path": "favicon.ico",
        "git_path": "git/",
        "google_favicon_path": "https://www.google.com/s2/favicons?domain=github.com",
        "headers_path": "headers.json",
        "htmltotext_path": "htmltotext.txt",
        "index_path": "index.html",
        "media_path": "media/",
        "mercury_path": "mercury/content.html",
        "pdf_path": "output.pdf",
        "readability_path": "readability/content.html",
        "screenshot_path": "screenshot.png",
        "singlefile_path": "singlefile.html",
        "warc_path": "warc/",
        "wget_path": "github.com/microsoft/mxc.html"
    },
    "domain": "github.com",
    "extension": "",
    "hash": "1QKKM6RCK52XCQ9ZA5JX",
    "history": {
        "archive_org": [],
        "dom": [],
        "favicon": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--output",
                    "favicon.ico",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.google.com/s2/favicons?domain=github.com"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-09T10:07:28.987378+00:00",
                "index_texts": null,
                "output": "favicon.ico",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:28.373298+00:00",
                "status": "succeeded"
            }
        ],
        "git": [],
        "headers": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--head",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://github.com/microsoft/mxc"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-09T10:07:29.722421+00:00",
                "index_texts": null,
                "output": "headers.json",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:28.996416+00:00",
                "status": "succeeded"
            }
        ],
        "htmltotext": [],
        "media": [],
        "mercury": [
            {
                "cmd": [
                    "/app/node_modules/@postlight/parser/cli.js",
                    "https://github.com/microsoft/mxc"
                ],
                "cmd_version": "1.0.0",
                "end_ts": "2026-10-09T10:07:46.716534+00:00",
                "index_texts": null,
                "output": "mercury",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:41.167801+00:00",
                "status": "succeeded"
            }
        ],
        "pdf": [],
        "readability": [
            {
                "cmd": [
                    "/app/node_modules/readability-extractor/readability-extractor",
                    "/tmp/tmps57enprq",
                    "https://github.com/microsoft/mxc"
                ],
                "cmd_version": "0.0.11",
                "end_ts": "2026-10-09T10:07:41.157824+00:00",
                "index_texts": [
                    "Microsoft eXecution Container (MXC)\nMXC is a sandboxed code execution system for running untrusted code\n(model output, plugins, and tools) on Windows, Linux, and macOS. It provides\nmultiple containment backends, from OS-native process sandboxes to full VMs,\nbehind a unified containment model and typed SDKs.\nFeatures\n\nCross-platform: Windows, Linux, and macOS support with\nplatform-appropriate containment backends\nJSON-based configuration: Versioned container-creation requests and\nsecurity policies\nMultiple containment backends: ProcessContainer, Windows Sandbox, LXC,\nBubblewrap, Seatbelt, MicroVM (Nanvix), Hyperlight, IsolationSession, and WSLC\nPolicy-driven sandboxing:\n\nFilesystem policy: Read-only, read-write, and denied path lists\nNetwork policy: Proxy support, outbound controls, and backend-dependent\nhost filtering\nUI policy: Clipboard, display, and GUI access controls\n\n\nState-aware lifecycle: Provision, start, execute, stop, and deprovision\npersistent containers\nRust, .NET, and Node SDKs: Versioned APIs for one-shot and state-aware\nexecution\nDiagnostics: Tools to understand access-denied failures in a container\n\nWhat is MXC?\nMXC is an SDK dependency that builds into your app.\n\n  \n      flowchart LR\n    App[\"Your application<br/>Launch API\"] --> SDK[\"MXC SDK<br/>Rust / .NET / Node<br/>(in process)\"]\n    SDK --> Backend[\"Selected backend<br/>(in process)\"]\n    Backend --> Container[\"Isolated workload<br/>ProcessContainer / WSLC / Bubblewrap / ...\"]\n\n    \n  \n    \n      Loading\n\n  \n\n\nYour application specifies:\n\nThe container type\nThe containment rules\nThe workload command\n\nMXC validates the request, selects the backend, and launches the workload in\nthe resulting container.\nWhat container types are supported?\nMXC runs workloads through platform-appropriate container backends on Windows,\nLinux, and macOS.\n\n\n\nRuntime platform\nDefault backend\nOther backends\nMinimum host OS\n\n\n\n\nWindows 11 x64 / ARM64\nprocesscontainer\nwindows_sandbox*, wslc, microvm*, hyperlight*, isolation_session\nWindows OS-version support\n\n\nLinux x64 / ARM64\nbubblewrap\nlxc, microvm, hyperlight\n-\n\n\nmacOS ARM64 / x64\nseatbelt\n-\n-\n\n\n\n* These backends are experimental.\nHow do I use MXC?\nInstall an SDK through your package manager. You do not need to clone this\nrepository.\n\n\n\nSDK\nPackage\n\n\n\n\nRust\nhttps://crates.io/crates/mxc-sdk\n\n\n.NET\nhttps://www.nuget.org/packages/Microsoft.Mxc.Sdk\n\n\nNode\nhttps://www.npmjs.com/package/@microsoft/mxc-sdk\n\n\n\nThe Node and .NET packages include the native runtime assets. The Rust crate\nbuilds the MXC SDK, engine, and selected backends into the consuming\napplication.\nNon-SDK consumption: Platform-specific executor binaries, such as\nwxc-exec.exe, accept JSON container-creation requests defined by the\nstable schema. Use for testing or when the\nSDK cannot be embedded in your app.\nRunning a contained workload\nFor complete SDK samples, see the\nRust, .NET, and Node samples.\nSample Node snippet\nimport { spawn, type ContainerRequest } from '@microsoft/mxc-sdk/v1';\n\nconst request: ContainerRequest = {\n  command: 'node -e \"console.log(\\'hello from container\\')\"',\n  network: { egress: { default: 'deny' } },\n  timeoutMs: 30_000,\n};\n\nconst child = await spawn(request);\nSee the runnable\nstreaming standard-I/O sample and the\nSDK API reference.\nMy application won't run in the sandbox!\nYour application will hit access issues when running in a sandbox, until you've\nhad time to tune your containment rules. We're here to help.\nDebug console mode\nNative executors normally reserve standard input, output, and error for the\nworkload. Use --debug for MXC diagnostic output:\nwxc-exec.exe --debug config.json\nSee MXC diagnostics for the complete\ndeveloper reference.\nAudit mode\n\nWarning: --audit turns off all sandbox security for the workload being\nanalyzed. Never use it to run untrusted code.\n\nAudit mode helps a policy author find access-denied failures and reconstruct a\nProcessContainer policy that grants the files and capabilities a trusted tool\nactually needs. On supported Windows releases, run:\nwxc-exec.exe --audit policy.json\nMXC records the observed accesses and produces policy-authoring artifacts. See\nlogging access denied for safe\ndeny-and-record diagnostics, audit outputs, and supported workflows.\nTelemetry\nOfficial Microsoft builds can send optional diagnostic telemetry to Microsoft.\nTelemetry is off unless the individual run opts in, the Windows user has\nexplicitly consented, administrative policy permits collection, and your\napplication enables the telemetry option in a contained workload request. An\nadministrator can block telemetry but cannot grant consent for the user.\nLocal open-source builds are not configured to route telemetry to Microsoft,\nand telemetry is a no-op on non-Windows platforms. See\ntelemetry policy and consent for controls and privacy\ndetails.\nBuilding from source\nBuild from source when developing MXC, changing the native runtime, or using\nthe standalone executor binaries instead of a packaged SDK. Repository builds\nproduce the platform-native runtime and executors and stage the native assets\nused by the Node SDK.\nBuild prerequisites are:\n\nRust, pinned to version 1.93 by\nsrc/rust-toolchain.toml\nNode.js 24 or later and npm\nThe platform toolchain and prerequisites described by the selected backend\n\nBuild\nWindows\nbuild.bat --all             # Release build for current architecture\nLinux\n./build.sh --all            # Release build\nmacOS\n./build-mac.sh --all        # Release build for native architecture\nDocumentation\nConsumer documentation\n\n\n\nDocument\nRepository location\nPurpose\n\n\n\n\nSDK samples\nsamples/\nRunnable Rust, .NET, and Node scenarios\n\n\nSDK API reference\ndocs/api-reference/\nSupported V1 operations and types\n\n\nContainer lifecycle\ndocs/container-lifecycle.md\nPersistent container lifecycle overview\n\n\nLogging access denied\ndocs/logging-access-denied.md\nDiagnose blocked accesses and author policy\n\n\nTelemetry\ndocs/telemetry.md\nConsent and administrative controls\n\n\nBackend guides\ndocs/backends/\nPlatform and backend prerequisites and behavior\n\n\n\nRepository contributors should start with the\nMXC development documentation.\nContributing\nSee CONTRIBUTING.md for contribution guidelines.\nLicense\nSee LICENSE.md for details."
                ],
                "output": "readability",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:37.215233+00:00",
                "status": "succeeded"
            }
        ],
        "screenshot": [],
        "singlefile": [],
        "title": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://github.com/microsoft/mxc"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-09T10:07:37.207404+00:00",
                "index_texts": null,
                "output": "GitHub - microsoft/mxc: Policy-driven, layered isolation and containment \u00b7 GitHub",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:37.123252+00:00",
                "status": "succeeded"
            }
        ],
        "wget": [
            {
                "cmd": [
                    "wget",
                    "--no-verbose",
                    "--adjust-extension",
                    "--convert-links",
                    "--force-directories",
                    "--span-hosts",
                    "--no-parent",
                    "-e",
                    "robots=off",
                    "--reject=js,mjs,woff,woff2,ttf,otf,eot,mp4,m4v,mov,webm,ogv,mkv,avi,flv",
                    "--timeout=120",
                    "--restrict-file-names=windows",
                    "--page-requisites",
                    "--user-agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) wget/GNU Wget 1.21.3",
                    "--compression=auto",
                    "--timestamping",
                    "https://github.com/microsoft/mxc"
                ],
                "cmd_version": "GNU Wget 1.21.3",
                "end_ts": "2026-10-09T10:07:37.113153+00:00",
                "index_texts": null,
                "output": "github.com/microsoft/mxc.html",
                "pwd": "/data/archive/1791540391.500412",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-09T10:07:29.732458+00:00",
                "status": "succeeded"
            }
        ]
    },
    "icons": null,
    "is_archived": true,
    "is_static": false,
    "latest": {
        "archive_org": null,
        "dom": null,
        "favicon": "favicon.ico",
        "git": null,
        "media": null,
        "pdf": null,
        "screenshot": null,
        "singlefile": null,
        "title": "GitHub - microsoft/mxc: Policy-driven, layered isolation and containment \u00b7 GitHub",
        "warc": null,
        "wget": "github.com/microsoft/mxc.html"
    },
    "link_dir": "/data/archive/1791540391.500412",
    "newest_archive_date": "2026-10-09T10:07:41.167801+00:00",
    "num_failures": 0,
    "num_outputs": 6,
    "oldest_archive_date": "2026-10-09T10:07:28.373298+00:00",
    "path": "/microsoft/mxc",
    "schema": "Link",
    "scheme": "https",
    "snapshot_id": "43fffa8e-ad99-4550-b528-42b91962ac9e",
    "sources": [
        "/data/sources/1791540391-import.txt"
    ],
    "tags": null,
    "tags_str": "",
    "timestamp": "1791540391.500412",
    "title": "GitHub - microsoft/mxc: Policy-driven, layered isolation and containment \u00b7 GitHub",
    "updated": "2026-10-09T10:07:28.372830+00:00",
    "updated_date": "2026-10-09 10:07",
    "url": "https://github.com/microsoft/mxc"
}