Comment

Comment by vscarpenter

How do you see this fitting with AWS’s Strands Box from last week? Box isn’t hosted compute. It’s an open-source sandbox plus a policy engine that checks shell, Python, egress, and MCP calls, and swaps credential placeholders for real secrets at the gateway. That’s the broker layer ekorondy and talkarimli are asking about.

Two questions: Could a policy layer like Box run inside your gVisor sandboxes, or would it need your full-VM tier? And on price, have you compared against AgentCore Runtime? It bills CPU only while active, which targets the same bursty pattern you’re optimizing for.

parent vscarpenter 27 days ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton