🧠 Firecracker is the quiet reason agent sandboxes actually work

About 50,000 lines of Rust. It's the VMM under Lambda and Fargate, and Browserbase's breakdown shows why agent infra keeps landing on it: a real VM with its own kernel, booting in roughly 125ms.

Containers share a kernel. When your agent runs untrusted code, that's a weird thing to bet on.

Boring plumbing wins again.