InfoQ 中文T2·68 pts
- Workspaces assigns each developer or agent an isolated hardened micro-VM, supporting session snapshot restoration and multi-task isolation.
- Utilizes host-side proxies to inject short-term credentials, avoiding long-term keys inside VMs to mitigate prompt injection risks.
- Checks runs CI steps in pre-warmed micro-VMs based on lock files, accessible to agents via MCP servers or SDKs.