fylo

an agentic harness where the unit of work is a belief

Runs in a disposable Firecracker VM that expires after 45 minutes. Egress is limited to the model and belief backend. Anything you type is visible to whoever provisioned it — treat it as a public demo, not a private workspace.