How do you see this fitting with AWS’s Strands Box from last week? Box isn’t hosted compute. It’s an open-source sandbox plus a policy engine that checks shell, Python, egress, and MCP calls, and swaps credential placeholders for real secrets at the gateway. That’s the broker layer ekorondy and talkarimli are asking about.
Two questions: Could a policy layer like Box run inside your gVisor sandboxes, or would it need your full-VM tier? And on price, have you compared against AgentCore Runtime? It bills CPU only while active, which targets the same bursty pattern you’re optimizing for.