Agent Sandboxes
how to create millions of them

Seatbelt: the macOS Sandbox
Landlock
seccomp
cgroups
Namespaces and Bubblewrap
Virtual Hardware: Firecracker
Virtual Kernel: gVisor
Customer Isolation

source : mrinal.com/articles/agent-sandboxes