Runtime Map

Runtime Map

Agentic Sandbox models three execution substrates: local host processes, Docker-backed containers, and full KVM virtual machines. Operators choose the isolation tier per instance.

Runtime Spectrum

RuntimeBest fitTradeoff
Host RuntimeAIWG base-level local execution where the agent runs directly on the user's host.Least isolation: the agent has full host access unless separately constrained by the OS. Durable execution requires the host supervisor tracked by #460.
KVM VMLong-running autonomous agents that need kernel isolation, controlled networking, loadouts, and per-VM secrets.Slower provisioning and more host prerequisites.
Container RuntimeFast local validation, dashboard testing, and low-friction agent process management without KVM setup.Weaker isolation boundary than a VM.

Runtime Foundations

hypervisors, and build targets.

dashboard/CLI surfaces.

PTY/session, reattach, and multi-watch-agent boundary.

teardown.

Provisioning And Storage

  • Deployment - host setup and production deployment.
  • Loadouts - YAML loadouts and profile composition.
  • Agent Share - virtiofs shared storage layout and data

flows.

CPU, memory, disk, and quota strategy.