Hacocoon

Hacocoon is a secure workspace runtime for people, developer tools, and coding agents. It runs development tools in isolated Environments, keeps project files in Workspaces, and mediates access to Host credentials and external services. An agent can edit, build and test without receiving Host management authority.

The project is pre-1.0 and breaking changes are expected. Its current local backend is Incus on Ubuntu 26.04+ (including a dedicated WSL 2 distribution on Windows). Implementation and tested platform coverage are separate.

Hacocoon provides CLI operations for Workspace, Environment, Base, storage, network, and configuration. The default-session contract describes retention, the eight-repository limit, and later membership changes. Stop preserves the Environment, while Delete discards its root filesystem. Writable Workspace data remains writable by the agent; isolation is not a backup.

Optional OCI Stores are available via haco plugin oci, and Core does not require Docker or containerd. The software is licensed under Apache License 2.0.