14:34
2026-09-11
cantelop.com
ai-agents
Sandbox Boundaries
Cantelop runs each active AI agent Session in a separate Firecracker microVM, isolating compute, host, network, resources, and lifecycle to limit the blast radius of untrusted code, according to a blo…