iofold/stablehand is a runtime that drives agents from several execution harnesses in isolated sandboxes on your own server. The core proposition in the repository description and README is that it manages not only the execution environment but also human approvals, spending limits, and event logging. The latest public release is not in FACTS, so this introduces the implementation described in the repository rather than changes to a specific version.
Agent configuration is written in YAML, and each execution takes place in its own Docker container. Agents can be run on a schedule or in response to events, and tool calls flagged as risky wait for human approval. It also sets per-agent budget limits and per-run spending caps. Events are written to the database first, so runs can continue after a restart, and a run receipt records the model and usage, cost, approval history, and generated files. It is written in TypeScript and released under the MIT license.
That said, the README states that it does not provide Firecracker isolation or MCP/Composio connections in the default configuration. Container isolation and the approval and logging features can therefore be confirmed, but neither Firecracker-level isolation nor those external connections can be assumed to come out of the box. FACTS gives the project a momentum score of 1.4, which means that, apart from the breadth of its operational features, the project's momentum is still assessed as limited.