Hacker News AIT2·72 pts
- One microVM per agent session, checkpointing during model thinking, and copy-on-write cloning from warm snapshots form the prevailing isolation pattern for agent sandboxes
- On bare metal a snapshot restore takes 25 ms, 26x faster than a cold boot, 64 concurrent forks are ready in about 150 ms, and each fork adds roughly 3 MiB of host memory
- Under nested virtualization concurrent forks never became ready, so the virtualization layer must be validated before deployment