Securing LLM Code Execution: Why I Chose gVisor Over Docker and VMs for My Agent Framework (#01)
My agent framework runs untrusted, LLM-generated scripts. I compare seven isolation options, from a bare process to a full VM, against my threat model and explain why I chose gVisor and which trade-offs I accept.