Nick

KubeCon is happening in Salt Lake City right now, and the biggest AI agent news of the week isn't a model release. It's a sandbox. NVIDIA just handed OpenShell, a runtime that polices what autonomous agents are allowed to touch, over to the Cloud Native Computing Foundation, the same open governance body that owns Kubernetes and Prometheus. Core contributors now include NVIDIA, Red Hat, Docker and Canonical, and it enforces policy through Cedar, another CNCF project, across Linux, macOS and Kubernetes. The pitch is specific: agents don't get fenced in by asking nicely, they get fenced in by infrastructure that sits outside them and decides what compute, secrets, inference providers and logs they can reach. Chris Wright put it plainly: "the controls around them need to be open, auditable, and built together with the ecosystem." That's a direct answer to six months of agent demos where the safety story was a confirmation prompt and nothing underneath it. Docker shipped its own version of this in January and has kept expanding it: every coding agent, Claude Code, Codex CLI, Copilot CLI, Gemini CLI, Kiro, gets its own disposable microVM with hardware level isolation and network allow and deny lists. Something goes wrong, you delete the sandbox and start a clean one in seconds. E2B took the standalone vendor route instead, raised a $21M Series A, and now sits inside the agent stack at 88% of the Fortune 100. Three different structures, Docker selling it as a feature to its existing install base, CNCF building it as neutral ground anyone can plug into, E2B running it as a cloud business, all converging on the same conclusion: you cannot trust the agent to police itself, so you build the fence around it instead. Six months ago this category barely existed as a line item. Now it has its own foundation project, its own funding rounds and its own KubeCon keynote slot. xitter.twitterapi.xyz/CloudNativeFdn/status/…