LifecycleephemeralNetworkhost firewallHost containmentjailResourcesmemory · vCPUsComputeFirecracker microVMagent processFive boundaries around one agent process.2026-09-09Running AI agents as untrusted codeStepan Arsentjev•3 min read
Sessionses_123SandboxWorkspacedefaultmessage 1message 2message 3one ID the whole timeallocate Areuse Aallocate BSandbox Akeep-alive expires, A endsSandbox B/workspace/workspacesame files under A and BtimeThe Session ID and the Workspace outlive any one Sandbox.2026-09-03CantelopStepan Arsentjev•4 min read
Stepan Arsentjev3 min readStepan Arsentjev3 min readStepan Arsentjev4 min readStepan Arsentjev3 min readStepan Arsentjev4 min readStepan Arsentjev3 min readStepan Arsentjev4 min read