Sep 3, 2026
AI Agent Sandboxes: What They Are and How to Choose One
What an AI agent sandbox is at the systems level, the four properties that decide one, and how 15 platforms compare — from an engineer who built one of them.
10 minSep 3, 2026AI Agent Sandbox Runtime: The Six Options and Who Uses Them
Firecracker, gVisor, Kata, containers, V8 isolates and libkrun compared — how each isolates, what it costs in memory, and which sandbox vendors run it.
10 minSep 2, 2026Isolation Is Not an Abuse Control: Lessons From My Fleet
A free-tier signup mined crypto on my microVM fleet in 27 minutes. Containment held perfectly and it changed nothing. What I built afterwards, in what order.
9 minSep 2, 2026Container vs microVM vs gVisor: Choosing Agent Isolation
A practical guide to picking an isolation model for AI-agent code execution, from someone who runs a Firecracker fleet: five models, five axes, one table.
9 min