For developers · Ithaca · Run

A computer for every agent, with control for you

Ithaca is being built to give each AI agent an isolated Linux environment, with approval before the actions that matter. Launch a machine, run your tools and decide which actions need a person.

Status: In development · waitlist

In development · waitlist open · UK hosting is planned, subject to provider validation

Join the waitlist ↓

How Ithaca works

01
Launch
Create an isolated Linux environment for the run.
02
Run
Bring your coding agent, tools and dependencies.
03
Approve
Hold protected actions until the right person says yes.
04
Review
Connect the action, approval and outcome in one record.

Use cases

Coding agents

Give an agent room to inspect a private repository, make changes and run tests. Put approval at the merge or deployment boundary.

Operational agents

Let an agent prepare a database update, refund or customer message. Require sign-off before the protected system executes it.

Platform teams

Define the environment, tool access and review requirements together. Give engineering and security a shared record to inspect.

Good to know

You cannot create a machine today. There is no Ithaca SDK package, install command, hosted API endpoint or self-service provisioning yet, and joining the waitlist does not provision compute or guarantee a launch date.
The initial scope is Linux CPU environments. GPUs, Windows, macOS and desktop streaming are outside the initial plan. VM sizes and the isolation runtime are still being selected.
A UK region is planned. UK data residency is a launch objective, not an available guarantee: the region, providers, log storage and retention will be confirmed before any pilot.
The proposed design checks protected actions at trusted tool boundaries. It does not claim to intercept every shell command or make arbitrary root-access code safe.
Remus is the permissions layer being developed for that boundary. It is not yet integrated with an Ithaca compute service.
No security certification, SLA or performance benchmark is claimed.

One stack: run, control, recover, improve

The rest of the developer stack

Join the Ithaca waitlist

We are defining the first Ithaca workloads. Leave your work email and we will write when early access opens.