Sandboxes Kata Containers run unattended .NET AI agent

The author explores secure isolation strategies for running unattended AI software agents in Kubernetes without permission prompts. The approach utilizes Kata Containers for microVM isolation, strict egress filtering via a custom network policy and a proxy broker for model and git credentials, and shared persistent volumes to balance security with performance. Open article →