“Like in the end, everyone always wants a VM because they tried everything. They tried containers, G visor, V8s. … Just please use micro VMs from the start.”

— Abhishek Bhardwaj, OpenAI

Video moment · 29:14 · youtube.com

From “From fork() to Fleet: Designing an Agent Sandbox Cloud — Abhishek Bhardwaj, OpenAI”, found 2026-10-15.

Take

His recommendation for agent sandboxes at fleet scale is hardware-virtualized microVMs (Firecracker, Cloud Hypervisor), with incremental disk snapshots so a sandbox can be restored on another node when hardware fails. He accepts the performance cost over the risk of a breach between tenants. Quoted from YouTube’s auto-generated captions.