Draw Things claims its Local Code public beta combines macOS-enforced sandboxing with 1.2–1.6× faster prefill on supported models, potentially making local coding-agent execution on Apple hardware faster and more contained.

state: seedheat: lowuncertainty: highconvergesscott: mediumlocal-inference coding-agents agent-sandboxingDraw Thingsliuliu

What is this?

Draw Things develops local AI image-generation software for Apple devices, with its own inference stack and a scriptable macOS CLI documented in the supplied first-party snippets. The case describes a separate Local Code public beta from Draw Things combining LLM inference, model-specific coding harnesses, and macOS-enforced sandboxing, with a claimed 1.2–1.6× prefill speedup. None of the supplied search results directly documents that beta, so its launch, sandbox guarantees, supported models, benchmark baseline, and liuliu’s role remain unverified here; the image-generation performance reports do not establish coding-agent performance.

Why it matters to Scott

Draw Things’ claimed OS-enforced coding-agent containment converges with Scott’s SiloOS position and offers a candidate to evaluate against Ask’s behavioural-only approval gate and his existing Bubblewrap isolation for coding workers. This is a concrete execution-boundary comparison, not evidence of full SiloOS controls: the supplied material does not verify the beta’s sandbox guarantees or speedup, and the radar hits track related tools rather than this development.

ip:framework.siloosdev:project.askdev:technology.bubblewrapradar:concept.agent-sandboxingradar:aide-declarative-agent-sandboxradar:coop-coding-agent-vm-isolation

queries asked of Scott's wikis

coding-agent harnesses model-specific tool execution
agent sandboxing OS-enforced permissions trust boundaries
local inference Apple Silicon backend selection
prefill latency coding-agent context economics
local coding agents privacy execution containment

Measured heat

now 0 pts/hpeak 0 pts/hcomments 0/hpeers p0momentum: steady2 platformsage 688h

points/hour across evidence · reading as of 2026-10-12 02:59:37.977291+11:00 · deterministic, not a model opinion

How the heat travelled

09-12 23:30	⭐ origin echo-reconstructed	The original announcement says: “We are bringing three things out today” — a fast LLM inference engine, model-specific harnesses, and an in- Draw Things (published as “Authors of Draw Things”) on blog (echo) · attributed from reddit.post.1weuzhy	—
09-13 02:08	first on r/LocalLLaMA · published · +2.6h	Public Beta of Local Code by Draw Things liuliu	—
09-13 02:08	amplified on r/LocalLLaMA 👑	reddit.post.1weuzhy liuliu	peak 9 · 18 comments · 100% of case engagement
09-13 02:20	our radar first saw it · +2.8h	discovery anchor: reddit.post.1weuzhy	—

pace: p57 vs 1032 stories at the 336h mark (now 688h old) — ahead of 37signals-agent-driven-default (1.0x), behind heif-heist-parser-disclosure (1.0x)

Evidence (2) — ⭐ canonical anchor

source	object	author	score	comments
🟠 reddit	Public Beta of Local Code by Draw Things LocalLLaMA	liuliu	8	18
🟧 echo.blog ⭐	The original announcement says: “We are bringing three things out today” — a fast LLM inference engine, model-specific harnesses, and an in-	Draw Things (published as “Authors of Draw Things”)	—	—

Interpretation history

2026-09-14T08:23:53Z
Discussion now foregrounds whether sandbox containment permits practical compile/test/build workflows, but offers neither an implementation result nor a demonstrated limitation. The case remains a single-origin announcement with unanswered performance and security questions, warranting lower attention rather than promotion.
2026-09-13T02:25:37Z
grounded: converges/medium — Draw Things’ claimed OS-enforced coding-agent containment converges with Scott’s SiloOS position and offers a candidate to evaluate against Ask’s behavioural-on
2026-09-13T02:23:00Z
origin walked (codex/luna, conf 0.98): anchor reddit.post.1weuzhy -> echo.blog.42009c1cd2 by Draw Things (published as “Authors of Draw Things”)
2026-09-13T02:21:57Z
case created — A builder's public-beta announcement presents a distinct local coding runtime with concrete containment and performance claims, though neither is independently validated.

Decision trace

10-03 02:58review_dormantscheduled targets exhausted or 28 quiet days
10-03 02:58drop_targetsquiet through full ladder or over cap 8
09-14 18:23repriceDiscussion now foregrounds whether sandbox containment permits practical compile/test/build workflows, but offers neither an implementation result nor a demonstrated limitation. The case remains a sin
09-14 18:23review_screenscreen failed: RuntimeError: litellm codex-luna exhausted: HTTPError: HTTP Error 503: Service Unavailable
09-14 18:21sensor_dirtycomment_update
09-13 20:25review_screenThe only change adds an unanswered follow-up question about M4 optimization; it provides no new fact, implementation result, or validation of the existing claims.
09-13 18:20sensor_dirtycomment_update
09-13 13:22review_screenThe added comments only request clarification about the already stated performance baseline, API support, and sandboxing; they provide no new facts or validation.
09-13 13:21sensor_dirtycomment_update
09-13 12:25groundDraw Things’ claimed OS-enforced coding-agent containment converges with Scott’s SiloOS position and offers a candidate to evaluate against Ask’s behavioural-only approval gate and his existing Bubble
09-13 12:23promote_anchororigin walk conf 0.98
09-13 12:21createA builder's public-beta announcement presents a distinct local coding runtime with concrete containment and performance claims, though neither is independently validated.