Dmitri Vasechkin

Firecracker microVMs and egress controls form the minimum boundary for untrusted agent code.

Suspending idle agents as snapshots cuts compute costs without rebuild overhead.

Keeping browser sessions alive between agent runs is what separates real work from restarts.

Persisting all four layers of agent state prevents silent failures when production systems restart.

Wakeup latency is a structural requirement, not a performance tuning detail.

Building agent products requires isolation architecture to be chosen before launch, not added later.