- Each agent runs in a dedicated microVM
- agents can build and run Docker containers inside the MicroVM
- no access to the host Docker daemon
- network isolation with allow and deny lists
- available for macOs and windows (linux support coming)
> no access to the host Docker daemon
I believe this is likely the only downside, but for good reasons!