#isolation-models

Choosing an Isolation Model for Untrusted Code: Userspace Kernel versus MicroVM

When exposing code execution to autonomous agents, choose between gVisor's userspace kernel sandbox and Firecracker's microVM. Compare attack surface