Google Donates Agent Substrate and gVisor to CNCF to Sandbox AI Agents at Scale
emmanuelvivier · x · 2026-11-08
At KubeCon North America in Salt Lake City, Google announced it is donating Agent Substrate, its orchestrator for AI agents, and the gVisor sandbox to the CNCF, alongside the 1.0 release of Agent Substrate.
- Why it matters: Kubernetes' Pod model assumes a program boots, binds a port and serves traffic continuously. AI agents instead execute untrusted code, commands and tool calls that must be isolated from host and network, and they spend most of their time idle waiting for model tokens or human review.
- Design: Agent Substrate was built from the ground up for agent security and density, combining Kubernetes' strengths with a new control and data plane for fully isolated, ultra-low-latency sandboxed compute and storage, targeting millions of agents.
- Community: Contributors have rapidly built core capabilities and stabilized APIs, culminating in the 1.0 release.
The move turns agent sandboxing from bespoke per-vendor work into shared infrastructure.
Related event: Google Donates Agent Substrate and gVisor to CNCF(2 posts)→
More from Infra
- Local LLM manager fix: concurrent requests from one session yield 2-3X speedup — draginol · 2026-11-09
- Datadog still leads observability, but its reputation is deeply split — thedealdirector · 2026-11-08
- Specialized Inference Chips: 3x Faster but Idle Half the Day Isn't 3x Cheaper — ai · 2026-11-08
- Running Qwen3.5-0.8B in pure Assembly: 6.51 tok/s on one CPU thread — suayptalha · 2026-11-08
- Baseten Loops goes GA with serverless SFT/RL training, per-token pricing — baseten · 2026-11-08
- Where do your agents run when the laptop closes? 4 hosting options compared — michaelTM_ai · 2026-11-08