AI Agent Security (Course)
MicroVM
Also: micro virtual machine, Firecracker microVM
A very lightweight virtual machine with its own kernel that starts quickly, used to isolate untrusted or agent-run code.
In more detail
A container shares the host's kernel, so a kernel flaw can cross the boundary. A microVM runs a separate guest kernel under a hypervisor, giving much stronger isolation while booting fast enough for agents that start and stop constantly. Platforms that execute agent-written code often use them, with the harness outside and only the code runner inside. The isolation is only one boundary: network policy, credentials and mounted files still need their own limits.