AI Agents
Sandboxing LLM-Generated Code Without Docker-in-Docker
Running agent-generated code in a plain Docker container trusts a boundary built for reviewed workloads. MicroVMs give you a real kernel per execution at roughly 125ms boot.
August 20, 2026