Every Muse user gets a free Secure VM in the cloud

David Singleton says every Muse user gets a free computer in the cloud, the Muse Secure VM. It is designed so a user and Muse can do nearly anything possible on a desktop computer while limiting risks such as prompt injection. Activity in the shared runtime cell is unrestricted, but sensitive actions are overseen by Sentinel, which runs outside that cell. Secrets such as passwords entered into Muse’s secure credential storage are also stored outside it.

The runtime cell has its own root filesystem, including a full Ubuntu Linux image, separate from the host filesystem that holds more sensitive data. Users can view and control its files, install software, write and compile code, and browse the web. Singleton says exploring the VM does not provide privileged access to Meta infrastructure or other people’s data. The design is described in a security blog post.

A file explorer in the Library tab lets users open markdown files Muse writes and inspect files inside the runtime cell. Asking Muse to show its entire filesystem returns the full contents of that cell, which Singleton says can amount to gigabytes. Users who want only data they created directly with Muse can download it under Settings > Data controls > Download your agent data.