Virtual-machine-backed sandboxes
Every hosted agent gets its own sandbox on the cluster we already operate. The workload looks like a container to the orchestrator and behaves like a virtual machine to the host, which is what you want when the code running is not yours.