Agents work inside a private VM
With Run in VM, the agent runs in a small Linux virtual machine that sees only the project you opened. It cannot read your other files or your other projects.
- The project’s
.gitfolder is read-only to agents. - A firewall keeps agents off your home network and your PC’s other local services.
- No license key or lasting token enters the VM: each agent session gets its own token, revoked when it ends.
- Every RoVibeCoder tool call is logged and shown live in the app.
Prefer speed over isolation? Run on this PC is one click away, with your agent CLI’s own permission prompts as the only limit.
- Agent CLIin the VM
- RoVibeCoder toolschecked and logged
- /workspacethis project only