- smolvm (what I currently use)

- tart (for macOS VM)

- nono

- Anthropic Sandbox Runtime (srt)

- Docker containers

I didn't love any of them, but nono/srt struck a nice balance of convenience + security. I found srt more intuitive than nono. I could basically share my srt with a colleage via a json, while the nono config is more complex. And also noisy with what gets blocked / asking for approval. Some would see that as a perk, I thought it was distracting since a big reason to use a sandbox is to avoid permissions fatigue.