gVisor

2026-10-01

COMPANIES · 1 SOURCE · InfoQ AI, ML & Data Engineering

Microsoft announces GA of Azure Container Apps Express and Container Apps Sandboxes

Microsoft has made Azure Container Apps Express generally available alongside Azure Container Apps Sandboxes. Express is an opinionated, developer-first deployment model that provisions compute, ingress, and autoscaling from a container image with scale-to-zero, while Sandboxes provide an isolated, prewarmed microVM-based compute layer that supports subsecond startup, suspend/resume and snapshotting.

7.0

2026-09-27

MODELS · 1 SOURCE · InfoQ AI, ML & Data Engineering

GKE Pod snapshots cut model startup latency up to 89%; GA on 1.35.3-gke.1234000+

Google published benchmarks for GKE Pod snapshots (general availability in May on clusters running 1.35.3-gke.1234000 or later) that checkpoint and restore full pod state including CPU/GPU memory, reporting startup latency reductions up to 89% (a 70B-parameter model in 37s, an 8B model in 15s). The feature relies on gVisor and GKE Sandbox (Autopilot has it by default), stores snapshot data in Cloud Storage, and is configured via PodSnapshotStorageConfig and PodSnapshotPolicy; compatibility rules and application rehydration limitations mean operational work shifts to snapshot lifecycle management.

7.0

2026-09-22

CODING · 1 SOURCE · InfoQ AI, ML & Data Engineering

Google open-sources AX, a Kubernetes-style orchestrator for autonomous AI agents

Google released AX (google/ax), an Apache‑2.0‑licensed, open-source orchestrator and declarative runtime for autonomous AI agents built atop Agent Substrate. AX treats agents as stateful actors with sub-second suspend/resume, exposes four Kubernetes-style CRD primitives (Task, Workspace, Gateway, Model) via ax.io/v1alpha1, and provides an ax CLI for managing sandboxed agent workloads aimed at production-scale and research use cases.

7.0

2026-09-21

COMPANIES · 1 SOURCE · AWS Machine Learning

Benchling runs multi-tenant AI agent code using Amazon Bedrock AgentCore Code Interpreter in VPC mode

Benchling described a defense-in-depth architecture to run AI agent‑generated scientific code across thousands of life‑sciences tenants using Amazon Bedrock AgentCore’s Code Interpreter in VPC mode. The setup places untrusted executions in a separate AWS account (the “Untrusted Code Account”), enforces DNS-level controls with Route 53 Resolver DNS Firewall, restricts network paths to specific VPC endpoints, injects per-job credentials via AWS STS, and runs continuous validation; the architecture reportedly handles >600 code execution sessions per day across >250 tenants per week with zero security incidents.

6.0