Kern is a fast, rootless sandbox and virtual resource runtime that can run untrusted and AI-generated code without compromising kernel security, using a real container model with no daemon. It provides isolation through user namespaces, seccomp allowlists, cgroup v2 limits, and device node management to ensure secure execution of code on Linux systems.