A zero-trust sandbox runtime on Kubernetes for isolating, snapshotting, and scaling millions of agents.