Conversation

Running AI Agents inside containers IS WRONG.
Containers share a kernel and memory.
AI execution must be controlled. A containerized AI can still perform kernel exploits and escape the container.
A Virtual Machine has it's own kernel. A Micro VM with a stripped down kernel is a STRONGER SECURITY CONTROL than a container on a stock kernel.

A MicroVM with a physical GPU breaks the isolation boundary.