One of our agents ran an rm -rf on an absolute path once and the only reason it hit nothing is that it typed 2046 instead of 2026 in the path, so a box I can roll back sounds good to me. Is the snapshot the only safety net, or can I also make some paths read only for the agent?
The snapshot-every-minute detail Simon mentioned is what caught my eye — a box per agent on my own VPS is appealing, but rollback is where I would get nervous. If I roll a box back a minute, does that restore the whole box state, including anything installed or written after the snapshot, or is it filesystem-only? And following Aleksandar's question about secrets: if a credential is injected after a snapshot, does a rollback leave it in place or wipe it?
A box per agent makes way more sense than one shared docker host once they all need different creds. How are you keeping secrets scoped so one agent can't see another's keys?
Earlier this year I gave an open-source agent a whole spare MacBook, because it wanted credentials for everything and Docker got messy. A box per agent on your own VPS, with a snapshot every minute to roll back to, is a much tidier answer to the same problem. It would be neat to see Hermes in the preinstalled list too.
About Paddock on Product Hunt
“Computers and sandboxes for your agents”
Paddock launched on Product Hunt on October 27th, 2026 and earned 107 upvotes and 10 comments, placing #11 on the daily leaderboard. Paddock gives each AI agent its own Linux computer or a locked-down sandbox, on one VPS you own. Free and open source, MIT licensed.
Paddock was featured in Open Source (69.1k followers), SaaS (45.3k followers), Developer Tools (523k followers) and GitHub (41.5k followers) on Product Hunt. Together, these topics include over 208.1k products, making this a competitive space to launch in.
Who hunted Paddock?
Paddock was hunted by Antonio Santiago Dueñas. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Paddock stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Antonio Santiago Dueñas
One of our agents ran an rm -rf on an absolute path once and the only reason it hit nothing is that it typed 2046 instead of 2026 in the path, so a box I can roll back sounds good to me. Is the snapshot the only safety net, or can I also make some paths read only for the agent?