Markdown source

From fork() to Fleet: Designing an Agent Sandbox Cloud Pt2

Conference Context

Session Description

Sandboxes unleash agents by giving them secure, fully functional computers where they can tackle diverse tasks with minimal setup. This talk explores the architectural challenges of building an agent sandbox cloud. We compare runtime isolation technologies and their trade-offs, examine persistence and storage as the next major unlock for agent capabilities, and discuss the key decisions involved in orchestrating and scaling sandboxes.

Media Evidence

Arrakis: How To Build An AI Sandbox From Scratch - Abhishek Bhardwaj, OpenAI (speaker-match related prior/adjacent AI Engineer video; captions: English auto-captions).

Evidence Graph

This evidence graph is generated from currently linked source material: official schedule text, related video pages, cached transcripts, visible slide text, dense/reconstructed slide pages, and AI slide-classification audits.

Media Signals

Agent Reading Notes

Use these signals to refine the synopsis, topic links, people/company context, and method notes. If a source is a related external video rather than an exact official recording, keep it framed as supporting evidence.

Summary

Abhishek Bhardwaj's World's Fair session is a Sandbox & Platform Engineering talk about the infrastructure layer that lets agents operate inside secure, real computing environments rather than toy execution sandboxes. The official session description frames the problem at cloud scale: compare runtime isolation technologies, decide how much kernel and process boundary protection is needed, make persistence and storage usable for longer-running agents, and orchestrate many sandbox instances as a production fleet. The connected speaker page adds useful context: Bhardwaj works on RL and agent infrastructure at OpenAI, so the session should be read as coming from the layer where agent training, tool use, and execution environments meet. The linked Arrakis video and slide pages are supporting evidence from a related public AI Engineer talk by the same speaker, not a confirmed recording of this exact World's Fair session, but they make the technical vocabulary concrete: Linux namespaces, containers, process cloning, mounts, filesystem snapshots, userspace behavior, syscalls, kernel boundaries, and attack surfaces. Together, the schedule and Arrakis materials point to a systems design talk about moving from a single sandbox runtime toward a fleet-scale agent sandbox cloud: how to isolate untrusted or semi-trusted agent work, how to preserve state without weakening security, and how to make sandbox orchestration reliable enough for production AI engineering workflows.

Transcript Status

Related video transcript availability: English auto-captions. Treat this as supporting context, not a recording of this exact scheduled session unless later confirmed. Not fetched yet.

People

Supporting Slides

Slide Evidence

Official YouTube Recording

Synthesis

Synthesized Breakdown

From fork() to Fleet: Designing an Agent Sandbox Cloud Pt2 ## Conference Context - Date/time: 2026-06-30 · 1:55pm-2:15pm - Track/room: Sandbox & Platform Engineering · Track 1 - Speaker(s): Abhishek Bhardwaj - Session type/status: session · confirmed - Track: Sandbox & Platform Engineering - Room: Track 1 - Session type: session - Status: confirmed ## Session Description Sandboxes unleash agents by giving them secure, fully functional computers where they can tackle diverse tasks with minimal setup. This talk explores the architectural challenges of building an agent sandbox cloud. We compare runtime isolation technologies and their trade-offs, examine persistence and storage as the next major unlock for agent capabilities, and discuss the key decisions involved in orchestrating and scaling sandboxes. ## Media Evidence Arrakis: How To Build An AI Sandbox From Scratch - Abhishek Bhardwaj, OpenAI (speaker-match related prior/adjacent AI Engineer video; captions: English auto-captions).

Speaker And Company Context

Topics Covered

Derived Links And Source Material

Novel Concepts / Clever Methods

Evidence Boundary

This synthesis is based on the official schedule and linked source pages. It should be revisited when exact session recordings or transcript-backed secondary sources are available.