Void Platform How to Play: A Beginner's Guide to Safe AI Agent Runs

Learn Void Platform how to play with a hands-on walkthrough: install the runtime, declare capabilities, run isolated microVM agents, and read traces.

What Void Platform Actually Is

If you searched for Void Platform how to play, you probably expected a game — and in a sense you found one. Void Platform is an open-source runtime that places every AI agent run inside its own disposable microVM, with the rules declared before the first move. No shared kernel, no ambient access to your machine, and no guesswork about what the agent touched once the round ends.

This Void Platform how to play guide takes you from install to your first contained run, then shows you how to read the telemetry that tells you whether things went clean. The core idea is that generation was never the hard part. Control is. Once an agent can open shells, edit files, and call APIs, the useful question stops being "did it help?" and becomes "what still contains it when it is wrong?"

That shift in framing is what makes the platform feel less like a tool and more like a game with fixed rules.

PieceWhat it isWhy it matters
Void-BoxDisposable microVM runtimeOne run gets one dedicated boundary
Guest kernelIsolated kernel inside the VMNo shared kernel with the host
Capability gateExplicit declaration of commands, files, network, limitsNothing is ambient or implied
OCI rootfsImage plus overlays and snapshot/restoreReproducible guest every time
OTLP telemetryTraces, metrics, and structured eventsThe run stays inspectable afterward
Void-ControlOperator layer for many runsCoordinate pipelines and inspect stages

The mental model is refreshingly simple: the agent decides what to do, and the runtime decides what it can touch, where it runs, and what you can inspect later. Capabilities are declared before execution, each run enters its own boundary, and logs, traces, and outputs remain observable throughout.

Before Your First Run: What You Need

Setup is deliberately small. There is no control plane to stand up and no vendor account to create — the project is Apache 2.0 licensed and designed to be vendor-neutral, so the same runtime works locally or on remote hardware.

RequirementDetails
Host operating systemLinux with KVM, or macOS on Apple Silicon
Current releasev0.2.0 (latest at the time of writing)
InstallationOne-line install script published on the official site
LicenseApache 2.0, open source
Agent compatibilityExisting CLI agents, or remote agents on the same runtime
Where it runsLocally or remotely, your choice

Two practical notes before you begin. First, download the installer only from the official Void Platform site and read the script before you pipe it into a shell — that is basic hygiene, not distrust. Second, check your hardware: the platform lists Linux KVM and Apple Silicon macOS, so an older Intel Mac is not a supported host. If your laptop is Intel-based, run the runtime on a Linux box instead.

Void Platform How to Play: Your First Isolated Run

The fastest way to learn Void Platform how to play is to pick a task small enough to finish in one sitting. A single research question, a small refactor, or a scripted file cleanup all work well. Resist the urge to start with your most complicated pipeline.

StepActionWhat a good result looks like
1Install the runtimeThe installer completes and the runtime responds
2Choose one CLI agentYou already know how this agent behaves
3Write a short capability listEvery entry has a reason you can state out loud
4Launch the runA fresh microVM starts and an interactive PTY shell appears
5Work inside the shellThe agent stays inside the declared scope
6Inspect the outputTraces, logs, and artifacts are preserved
7Let the VM exitThe boundary closes and nothing lingers

Choose a Task That Fits One Box

A good first run is narrow enough that you can eyeball the result. For example, wrapping a coding agent and asking it to summarize a repository is a well-bounded task: it needs read access to one directory, no outbound network, and a modest CPU ceiling. If the agent asks for more than that, you have learned something useful about the task, not the tool.

Snapshot and restore matter here. Because the runtime restores from snapshots rather than booting a full VM each time, iterations stay fast enough that experimenting does not feel like a chore.

The Rules of the Game: Declaring Capabilities

Prompt discipline is not isolation. Instructions can be redirected by anything the agent ingests, which is why any honest Void Platform how to play tutorial starts with permissions rather than prompts. Permissions must be enforced by the runtime, not inferred from good intentions.

CapabilityWhat it grantsSensible starting point
Filesystem mountsRead or write on specific pathsOne working directory, read-only where possible
Network egressOutbound connectionsDeny by default, then allowlist specific hosts
Tool and skill mountsCLIs and skills visible to the agentOnly what the task genuinely needs
Resource limitsCPU and memory ceilingsSet a ceiling even for throwaway experiments
SecretsCredentials inside the guestNone by default; short-lived tokens if unavoidable

Before you approve any capability, ask three questions. Does this task fail without it? What is the worst thing an injected instruction could do with it? And would I notice if it happened? If the third answer is no, you are missing observability, not permissions.

Why the Boundary Holds Where Containers Don't

Containers can be hardened against most known attacks, and plenty of teams do exactly that. The difference is the default. A container-based agent shares the host kernel, so a single misconfiguration has a wide blast radius. The reason a Void Platform how to play walkthrough keeps returning to isolation is that containment has to survive failure, not just good configuration.

AttackContainer-based agentVoid-Box run
Prompt injectionAmbient environment secrets can leakNo ambient host secrets
Docker socket escapeA mounted socket grants full host controlNo socket exists
Privileged containerHost disk and devices are reachableNo host devices by default
Cgroup escapeCan execute a binary on the hostGuest kernel only
Metadata SSRFCloud metadata service may hand over credentialsMetadata is unreachable

Read that table as a design statement rather than a scoreboard. The point is that when a run goes off course, the outcome should be a contained incident with visible evidence — not ambient access to your laptop.

Reading the Scoreboard: Traces, Metrics, and Logs

Observability is the part of Void Platform how to play that beginners skip and experienced operators never do. A run is not finished when the agent stops typing; it is finished when you can explain what happened.

SignalWhat you getQuestion it answers
OTLP tracesPer-stage spans correlated to the run and stageWhere did the time actually go?
OTLP metricsTokens, cost, and duration per stageWhat did this run cost me?
Structured eventsbox.started, box.completed, stage.errorWhat happened, and in what order?
procfs telemetry via vsockCPU and memory from inside the guestDid the run hit its ceiling?
ArtifactsOutputs, logs, and structured eventsWhat did it produce?
  • Traces belong to the run, not to a shared sandbox, so correlation is unambiguous.
  • Artifacts survive the VM, which means you can audit a run long after the guest is gone.
  • Boundary events come from host–guest activity, so you are reading evidence rather than reconstructing a story.

Leveling Up: Coordinating Many Runs with Void-Control

Containment is per run, but real work is many runs. Void-Control is the operator layer that spawns Void-Box runs, coordinates them across stages, and shows what each one touched. It is terminal-first: you drive runs from the command line, then drill into any stage without losing context. Execution-graph visibility makes stage relationships and paths readable at a glance, which is the difference between debugging a pipeline and guessing at one.

Start with a two-stage pipeline — research, then draft, for instance — before you build anything longer. Each stage gets its own boundary, which keeps failures local and makes the graph easy to reason about.

Habits That Separate Clean Runs from Messy Ones

MistakeSymptomFix
Reusing one long-lived boxPermissions creep between tasksOne run per task, always
Over-granting network egressThe agent reaches things it never neededDeny by default, allowlist hosts
Skipping resource limitsNoisy behavior inside the guestSet CPU and memory ceilings early
Never reading traces"It worked, I think"Read spans before scaling up
Testing on unsupported hardwareConfusing startup failuresUse Linux KVM or Apple Silicon macOS

One more habit worth forming early in your Void Platform how to play journey: keep a short written record of what each agent was allowed to touch. When a run misbehaves, that note plus the trace turns a mystery into a five-minute check.

FAQ

Do I need Linux to learn Void Platform how to play? No. The runtime supports Linux with KVM and macOS on Apple Silicon. If you are on an Intel Mac, use a Linux machine instead, since that combination is not among the listed platforms.

How is a microVM different from a container for agent workloads? A container shares the host kernel, so a misconfiguration can expose the host. Each Void-Box run gets its own guest kernel with no shared boundary and no ambient access to host secrets or devices.

What should my first capability list include? Start with one filesystem mount, network denied by default, and a resource ceiling. Add tools only when a task fails without them, and never grant access you would not be able to detect afterward.

Where does the Void Platform how to play learning curve get steep? Almost always at multi-stage pipelines. Single runs are straightforward; coordinating several of them is where execution-graph visibility and consistent capability declarations start paying off.