Ax/agent substrate is focused on enterprise inference. This is squarely targeting the training and reinforcement learning patterns (it's not to say these technologies don't overlap, but perhaps closer to kube with knative & kata container support (and some level of session persistence across all 3). Or nomad... Or any orchestrator that supports multiple underlying isolation techniques.

I can't work out from the paper if the session can cross all 3 types of isolation (between persistence) but I'm assuming it can if it needs to evolve tool calling and security requirements.

In any case it feels like they're just composing and mangling technologies into a platform and not bringing much to the table (from what I've read so far; ie still using well established isolation tech and not something unexpected like a microkernel) but the outcomes are impressive