AI dominicreichl.com

Under Validation

Secure the FFmpeg binary your backend already shells out to.

A drop-in Linux wrapper with a pre-tuned bubblewrap/seccomp profile for media I/O paths. No gVisor. No custom DevOps week. Not a general-purpose sandbox.

Join the waitlistSee how it works

Concept validation only. No payment, no commitment, no recurring newsletter.

Local-first directionPortable outputsBuilt around a specific workflowEarly access is free

Proposed workflow

What the wrapper would do

Honest scope: FFmpeg-only. Speed and drop-in UX are the wedge; durable advantage has to come from search position, not the recipe itself.

01

Write jail + no network

Ephemeral unprivileged namespace: read input path, write only the designated output, network off by default.

02

Hardware encode paths

Optional device map for GPU encoders where the host already has working NVENC/VAAPI — not a WASM codec detour.

03

Drop-in argv

Replace the ffmpeg binary name in your subprocess call. No rewrite of your media pipeline.

The honest status

This is a product decision, not a finished product.

The concept is being validated before development time is committed. Joining tells us the problem is relevant to you and gives you first access if the evidence supports a build.

  • You will not be charged.
  • Your email is only used for this experiment.
  • You can leave the list at any time.

Before you decide

Questions, answered clearly.

The current scope, privacy model, and next step without launch-day promises.

Is this free bubblewrap with a README?

Functionally the isolation primitive is bubblewrap. The product hypothesis is an opinionated FFmpeg media profile plus packaging. Free gists may be enough for many teams — this waitlist tests whether anyone still wants a maintained package.

Does this stop every FFmpeg CVE?

No. Sandboxing reduces blast radius from malicious media; it does not patch FFmpeg itself. Keep FFmpeg updated.

Does this guarantee the intended outcome?

No. The concept should state its limits clearly and preserve human review wherever judgment is required.

What happens when I request access?

Your email is recorded for this experiment only. You receive one relevant update or beta invitation if the concept moves forward.

Early access

Want a maintained FFmpeg sandbox profile?

Join the waitlist. Planned pricing €9–€29/mo if demand clears the bar — no charge today.