Overview

Minimal.dev provides secure, reproducible software development by running code inside isolated, sandboxed microVMs that travel with the code in a single minimal.toml file. It verifies every component from trusted sources and attaches provenance data, including CycloneDX SBOM and VEX, and uses a secure package manager to supply executables from a curated registry. Unlike traditional containers, sessions are quick, stateful, and preserve Git history and file changes, with explicit access controls for AI agents. Its goal is to make secure software development the default while maintaining developer velocity.