Isolating Code-Execution MCP Servers: Why the Runtime Sandbox Is the Load-Bearing Control

TL;DR: Isolate code-execution MCP servers with risk of untrusted model-directed code. Runtime sandboxes like gVisor and Firecracker are the load-bearing control When an AI agent sends code to a model