Agent Substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.

Related contents:

• Why sandboxing your agent is not enough @ CNCF.

Give a coding agent its own disposable Linux machine, not yours. Disposable, network-restricted Linux VMs for AI coding agents.

clawk is a third option. cd into a repo, type clawk, and Claude Code (or Codex, or a shell) is working inside a disposable Linux VM (your code mounted in, root in the guest, no permission prompts) while your files, your keychain, and the rest of your machine stay out of reach. The agent gets its own machine instead of yours.

agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.

• Agent Sandbox @ GitHub.

Related contents:

• Running Agents on Kubernetes with Agent Sandbox @ Kubernetes blog.
• Why sandboxing your agent is not enough @ CNCF.