Your Agents Aren't Too Insecure. They're Too Awake.
Agent density is a lifecycle problem, not an isolation problem. Google's own GKE Agent Sandbox benchmark puts the sandbox at 44% and suspend and resume at up to 3.5x—the sandbox is the smaller half. And upstream Kubernetes 1.37 is quietly turning checkpoint and restore into a kubelet primitive. Here's why the economics live in the lifecycle, not the box.