Overview
As AI agents gain tools and autonomy, platforms need stronger isolation than shared-kernel containers — lightweight VMs, confidential computing, and memory-safe runtimes.
Timeline
-
2026-07-24: fly-io markets durable agent-computers vs disposable sandboxes; OpenAI eval monitoring failure underscores isolation+ops gap (2026-07-24-fly-io-25m-series-d-agent-computers)
-
2026-07-22: kata-containers 4.0 — runtime-rs default; agent-sandbox framing (2026-07-23-kata-containers-4-0-prnewswire)
-
Prior: Microsoft execution containers; OpenAI/HF sandbox incidents (2026-07)
Key Players
- openinfra / kata-containers
- kubernetes Agent Sandbox
- NVIDIA, Microsoft, Ant Group, Edgeless (attributed)
Analysis
Agent risk profile (shifting tools/prompts) drives VM-per-workload interest. Rust defaults improve memory safety for high-churn sandbox fleets.