2026-10-11 17:11 UTC

Independent deployment will determine whether Kubernetes SIG Agent Sandbox provides reliable, reproducible workload isolation for AI agents and gains adoption as shared Kubernetes runtime infrastructure.

state: expiredheat: lowuncertainty: highnovelscott: lowagent-sandbox kubernetes agent-runtimes agent-harnessesKubernetes SIGs

What is this?

Agent Sandbox is an open-source Kubernetes SIG Apps project that provides a CRD-based, declarative API for managing isolated, stateful, singleton workloads with stable identities, aimed particularly at AI agent runtimes and development environments. It is runtime-agnostic and can use backends such as gVisor or Kata Containers when stronger isolation is required for untrusted or LLM-generated code. The supplied material describes its architecture and intended benefits, but does not independently establish reproducibility, production reliability, or broad adoption as shared Kubernetes infrastructure.

Why it matters to Scott

No intersection was found in the supplied Scott wiki or radar hits. Although Agent Sandbox is topically adjacent to agent harnesses and runtime isolation, the evidence does not show that it bears on a position or project Scott already holds or tracks.
queries asked of Scott's wikis
  • coding-agent sandbox isolation architecture
  • agent harness and runtime boundary
  • reproducible stateful agent environments
  • Kubernetes-native agent infrastructure
  • untrusted code execution threat model
  • sandbox provisioning latency and warm pools

Measured heat

no measured readings yet — the hourly heat pass fills this in

How the heat travelled

no chain yet — the hourly chain pass fills this in

Evidence (4) — ⭐ canonical anchor

sourceobjectauthorscorecomments
🟧 hnAgent Sandbox: A Kubernetes CRD and controller for AI agent runtimesjhgaylor21
🟧 echo.github ⭐The repository is the primary artifact. Its first project-specific README commit says: “agent-sandbox enables easy management of isolated, sKubernetes SIG Apps (Kubernetes community)——
🟧 hnShow HN: Isolade, a local-first coding agent workbench with secretless microVMsjachris24
🟧 hnCurie – ship Claude Code agents to Kubernetes with Git pushathusoo81

Interpretation history

Decision trace