Mini-workers - Ship 26 NYC Workshop
summary
Mini Notion Workers deploy compiled tarballs to Vercel Sandbox and blob storage, spawn fresh sandboxes per run, and extract tool names, JSON schemas and descriptions by importing the module and JSON.stringify-ing its exports. Inputs get Zod validation before conversion back to runtime types; each tool executes in a short-lived Node process whose stdout the platform parses, with snapshotting, log-size limits, explicit process exit and schema checks preventing leakage. Live demo mostly works; one external API flake interrupts a call.
AI-written summary · about
chapters (8)
- 0:00What are Notion Workers?
- 1:47Safety lessons from GitHub Actions
- 4:23Demo: is this workshop cursed?
- 7:08The architecture: Blob, sandboxes, agents
- 11:37Self-describing code: extracting tools safely
- 21:27Executing untrusted tools in fresh sandboxes
- 25:09Production tips: exits, output limits, snapshots
- 28:31Q&A: dedup, billing, and Letterboxd
related talks
29mEnter the Sandbox: JS on Wasm
01h 21mShip Agents that Ship: A Hands-On Workshop
12mDocker Sandboxes for AI
18mBuilding pi in a World of Slop
55mWarpforge: Decentralized supply chain management for building... Everything!
36mSandboxing Your Sandbox: Leveraging Hypervisors for WebAssembly Security
44mDefense in Depth: High Speed Cloud Native With Soft- and Hardware Protected Functions
24mContained Intelligence: Secure Sandboxing for Gen AI Code