AI EngineerVideoSource Linked
From fork() to Fleet: Designing an Agent Sandbox Cloud — Abhishek Bhardwaj, OpenAI
Long-running coding agents need isolated, persistent sandboxes: microVMs limit kernel exposure, while incremental snapshots enable recovery, branching, and faster placement across a fleet.
AI Engineer · Jul 13, 2026
Source Summary
The proposed sandbox cloud uses **microVM isolation**, persistent disk state, and **incremental snapshots** that store changes between checkpoints. A control plane and scheduler place or restore sandboxes across clustered nodes and regions.
Practical Implication
For long agent tasks, checkpoint the workspace so node failure, maintenance, or experimentation does not erase hours of work. Make scheduling snapshot-aware: restoring on a node that already holds the required layers reduces transfer and startup work.
Agent-Ready Context
The proposed sandbox cloud uses **microVM isolation**, persistent disk state, and **incremental snapshots** that store changes between checkpoints. A control plane and scheduler place or restore sandboxes across clustered nodes and regions. For long agent tasks, checkpoint the workspace so node failure, maintenance, or experimentation does not erase hours of work. Make scheduling snapshot-aware: restoring on a node that already holds the required layers reduces transfer and startup work. Persistence adds storage, lineage, and orchestration complexity. Warm pools consume idle resources, while memory-snapshot startup and hybrid pools trade operational simplicity for lower creation latency; the talk offers design intuition rather than measured fleet results.
Context Map
infracodingsecurity#sandboxing#cloud-agents#agent-reliabilityUncertainty
Persistence adds storage, lineage, and orchestration complexity. Warm pools consume idle resources, while memory-snapshot startup and hybrid pools trade operational simplicity for lower creation latency; the talk offers design intuition rather than measured fleet results.