Void Platform How to Play: A Beginner's Guide to Safe AI Agent Runs
Learn Void Platform how to play with a hands-on walkthrough: install the runtime, declare capabilities, run isolated microVM agents, and read traces.
What Void Platform Actually Is
If you searched for Void Platform how to play, you probably expected a game — and in a sense you found one. Void Platform is an open-source runtime that places every AI agent run inside its own disposable microVM, with the rules declared before the first move. No shared kernel, no ambient access to your machine, and no guesswork about what the agent touched once the round ends.
This Void Platform how to play guide takes you from install to your first contained run, then shows you how to read the telemetry that tells you whether things went clean. The core idea is that generation was never the hard part. Control is. Once an agent can open shells, edit files, and call APIs, the useful question stops being "did it help?" and becomes "what still contains it when it is wrong?"
That shift in framing is what makes the platform feel less like a tool and more like a game with fixed rules.
| Piece | What it is | Why it matters |
|---|---|---|
| Void-Box | Disposable microVM runtime | One run gets one dedicated boundary |
| Guest kernel | Isolated kernel inside the VM | No shared kernel with the host |
| Capability gate | Explicit declaration of commands, files, network, limits | Nothing is ambient or implied |
| OCI rootfs | Image plus overlays and snapshot/restore | Reproducible guest every time |
| OTLP telemetry | Traces, metrics, and structured events | The run stays inspectable afterward |
| Void-Control | Operator layer for many runs | Coordinate pipelines and inspect stages |
The mental model is refreshingly simple: the agent decides what to do, and the runtime decides what it can touch, where it runs, and what you can inspect later. Capabilities are declared before execution, each run enters its own boundary, and logs, traces, and outputs remain observable throughout.
Before Your First Run: What You Need
Setup is deliberately small. There is no control plane to stand up and no vendor account to create — the project is Apache 2.0 licensed and designed to be vendor-neutral, so the same runtime works locally or on remote hardware.
| Requirement | Details |
|---|---|
| Host operating system | Linux with KVM, or macOS on Apple Silicon |
| Current release | v0.2.0 (latest at the time of writing) |
| Installation | One-line install script published on the official site |
| License | Apache 2.0, open source |
| Agent compatibility | Existing CLI agents, or remote agents on the same runtime |
| Where it runs | Locally or remotely, your choice |
Two practical notes before you begin. First, download the installer only from the official Void Platform site and read the script before you pipe it into a shell — that is basic hygiene, not distrust. Second, check your hardware: the platform lists Linux KVM and Apple Silicon macOS, so an older Intel Mac is not a supported host. If your laptop is Intel-based, run the runtime on a Linux box instead.
Void Platform How to Play: Your First Isolated Run
The fastest way to learn Void Platform how to play is to pick a task small enough to finish in one sitting. A single research question, a small refactor, or a scripted file cleanup all work well. Resist the urge to start with your most complicated pipeline.
| Step | Action | What a good result looks like |
|---|---|---|
| 1 | Install the runtime | The installer completes and the runtime responds |
| 2 | Choose one CLI agent | You already know how this agent behaves |
| 3 | Write a short capability list | Every entry has a reason you can state out loud |
| 4 | Launch the run | A fresh microVM starts and an interactive PTY shell appears |
| 5 | Work inside the shell | The agent stays inside the declared scope |
| 6 | Inspect the output | Traces, logs, and artifacts are preserved |
| 7 | Let the VM exit | The boundary closes and nothing lingers |
Choose a Task That Fits One Box
A good first run is narrow enough that you can eyeball the result. For example, wrapping a coding agent and asking it to summarize a repository is a well-bounded task: it needs read access to one directory, no outbound network, and a modest CPU ceiling. If the agent asks for more than that, you have learned something useful about the task, not the tool.
Snapshot and restore matter here. Because the runtime restores from snapshots rather than booting a full VM each time, iterations stay fast enough that experimenting does not feel like a chore.
The Rules of the Game: Declaring Capabilities
Prompt discipline is not isolation. Instructions can be redirected by anything the agent ingests, which is why any honest Void Platform how to play tutorial starts with permissions rather than prompts. Permissions must be enforced by the runtime, not inferred from good intentions.
| Capability | What it grants | Sensible starting point |
|---|---|---|
| Filesystem mounts | Read or write on specific paths | One working directory, read-only where possible |
| Network egress | Outbound connections | Deny by default, then allowlist specific hosts |
| Tool and skill mounts | CLIs and skills visible to the agent | Only what the task genuinely needs |
| Resource limits | CPU and memory ceilings | Set a ceiling even for throwaway experiments |
| Secrets | Credentials inside the guest | None by default; short-lived tokens if unavoidable |
Before you approve any capability, ask three questions. Does this task fail without it? What is the worst thing an injected instruction could do with it? And would I notice if it happened? If the third answer is no, you are missing observability, not permissions.
Why the Boundary Holds Where Containers Don't
Containers can be hardened against most known attacks, and plenty of teams do exactly that. The difference is the default. A container-based agent shares the host kernel, so a single misconfiguration has a wide blast radius. The reason a Void Platform how to play walkthrough keeps returning to isolation is that containment has to survive failure, not just good configuration.
| Attack | Container-based agent | Void-Box run |
|---|---|---|
| Prompt injection | Ambient environment secrets can leak | No ambient host secrets |
| Docker socket escape | A mounted socket grants full host control | No socket exists |
| Privileged container | Host disk and devices are reachable | No host devices by default |
| Cgroup escape | Can execute a binary on the host | Guest kernel only |
| Metadata SSRF | Cloud metadata service may hand over credentials | Metadata is unreachable |
Read that table as a design statement rather than a scoreboard. The point is that when a run goes off course, the outcome should be a contained incident with visible evidence — not ambient access to your laptop.
Reading the Scoreboard: Traces, Metrics, and Logs
Observability is the part of Void Platform how to play that beginners skip and experienced operators never do. A run is not finished when the agent stops typing; it is finished when you can explain what happened.
| Signal | What you get | Question it answers |
|---|---|---|
| OTLP traces | Per-stage spans correlated to the run and stage | Where did the time actually go? |
| OTLP metrics | Tokens, cost, and duration per stage | What did this run cost me? |
| Structured events | box.started, box.completed, stage.error | What happened, and in what order? |
| procfs telemetry via vsock | CPU and memory from inside the guest | Did the run hit its ceiling? |
| Artifacts | Outputs, logs, and structured events | What did it produce? |
- Traces belong to the run, not to a shared sandbox, so correlation is unambiguous.
- Artifacts survive the VM, which means you can audit a run long after the guest is gone.
- Boundary events come from host–guest activity, so you are reading evidence rather than reconstructing a story.
Leveling Up: Coordinating Many Runs with Void-Control
Containment is per run, but real work is many runs. Void-Control is the operator layer that spawns Void-Box runs, coordinates them across stages, and shows what each one touched. It is terminal-first: you drive runs from the command line, then drill into any stage without losing context. Execution-graph visibility makes stage relationships and paths readable at a glance, which is the difference between debugging a pipeline and guessing at one.
Start with a two-stage pipeline — research, then draft, for instance — before you build anything longer. Each stage gets its own boundary, which keeps failures local and makes the graph easy to reason about.
Habits That Separate Clean Runs from Messy Ones
| Mistake | Symptom | Fix |
|---|---|---|
| Reusing one long-lived box | Permissions creep between tasks | One run per task, always |
| Over-granting network egress | The agent reaches things it never needed | Deny by default, allowlist hosts |
| Skipping resource limits | Noisy behavior inside the guest | Set CPU and memory ceilings early |
| Never reading traces | "It worked, I think" | Read spans before scaling up |
| Testing on unsupported hardware | Confusing startup failures | Use Linux KVM or Apple Silicon macOS |
One more habit worth forming early in your Void Platform how to play journey: keep a short written record of what each agent was allowed to touch. When a run misbehaves, that note plus the trace turns a mystery into a five-minute check.
FAQ
Do I need Linux to learn Void Platform how to play? No. The runtime supports Linux with KVM and macOS on Apple Silicon. If you are on an Intel Mac, use a Linux machine instead, since that combination is not among the listed platforms.
How is a microVM different from a container for agent workloads? A container shares the host kernel, so a misconfiguration can expose the host. Each Void-Box run gets its own guest kernel with no shared boundary and no ambient access to host secrets or devices.
What should my first capability list include? Start with one filesystem mount, network denied by default, and a resource ceiling. Add tools only when a task fails without them, and never grant access you would not be able to detect afterward.
Where does the Void Platform how to play learning curve get steep? Almost always at multi-stage pipelines. Single runs are straightforward; coordinating several of them is where execution-graph visibility and consistent capability declarations start paying off.
Related Guides
Void Platform Beginner Guide: Install, Configure, and Deploy Your First App
A practical Void Platform beginner guide covering prerequisites, installation order, core vs. optional features, and how to onboard your first developer.
Void Platform Gameplay: A Hands-On Guide to Installing and Deploying on Cloudflare
Void Platform gameplay, explained: install the platform, connect the CLI, deploy apps, and know exactly what the core build includes.
Void Platform Reddit: What the Community Actually Says About Self-Hosting
Searching Void Platform Reddit for real answers? Here's what the community reports about self-hosting, setup gotchas, and who should deploy directly.
Void Platform Tips: A Practical Guide to Safer Floor Openings on Site
Practical Void Platform tips for planning, installing, inspecting, and removing floor-opening protection that crews will actually use on site.