Research question
Which capabilities turn an isolated executor into an agent sandbox?
Key findings
- Isolation is only the starting point; lifecycle, files, networking, credentials, and evidence define the product boundary.
- Provider APIs should expose capability and maturity differences instead of hiding them.
- Reproducible execution pins images, policies, provider versions, and input digests.
Method and limitations
This version is desk research based on public repositories, official documentation, and architecture material. Vendor claims about performance, security, and compatibility require independent experiments on pinned versions before becoming Live Verified.