framework
Apple's virtualization API used to build the sandbox; per the source it boots only macOS on ARM and Linux on ARM.
No evidence-backed relationships are recorded.
Cua's pitch is an OS-level driver that delivers clicks and keystrokes in the background on macOS, Windows and Linux. The post hedges it with "where supported by the platform". A team has to test that clause before designing around it.
Reality
Apple's Virtualization.framework gives Linux guests a 2D framebuffer and no path to Metal. So a sandboxed coding agent has to send every request back across a vsock channel to an inference server running natively on macOS.
Reality
The engine changes on restart for anyone who had already picked Docker VMM, the new backend wants 4 GB, and the docs put that instruction on the other path.
Reality
Encore's crackling drives Firecracker on Linux and Apple's hypervisor on macOS. Getting one set of images to boot on both meant re-implementing much of what Docker and a Linux host do for free.
Reality
A developer's build notes on giving a coding agent its own machine: scoped credentials, a snapshot before every session, and a hypervisor that boots exactly two things.
Reality