Choosing an Isolation Model for Untrusted Code: Userspace Kernel versus MicroVM

TL;DR: When exposing code execution to autonomous agents, choose between gVisor's userspace kernel sandbox and Firecracker's microVM. Compare attack surface When teams expose a code-execution service