Devin

microvmcloud

The best-documented closed agent and the only one that names its primitive: a homegrown otterlink .

documentedCognition blog - otterlink VM ↗

Each Devin session runs in a cloud 'Devbox' on Cognition's homegrown otterlink (own kernel) with a blockdiff snapshot format for fast fork/rollback. Cognition explicitly argues VM-level isolation beats containers because containerized agents share a kernel. is deliberately open (recommended); self-hosting is a dedicated single-tenant VPC.

Secrets

secrets: managed

Secrets configured in Devin's settings are injected into its environment.

Isolation tech (cloud)

otterlink

Sources

Devin docs