The company says it is designed to combine VM-level isolation with container-like startup speed and density.
The service separates an agent harness, which calls the model and selects actions, from a sandbox that runs code, shell commands, browsers, and other tools. Google says sandboxes hold no credentials: traffic uses virtio-vsock and proxies, while Agent Gateway exchanges credentials in flight. The design also uses Titan silicon and the Titanium IPU as security components.
For idle workloads, Google describes checkpoint and restore, pre-warmed snapshot images shared with copy-on-write, and persistent workspaces on Hyperdisk. It lists interactive agents, autonomous software engineering environments, large-scale evaluation and reinforcement-learning jobs, and sandbox backends as intended workload classes.
The October 22, 2026 post says preview is targeted for the coming months and links to a sign-up form. It does not establish general availability, pricing, service-level terms, performance benchmarks, or external customer adoption.