Agent Substrate is an open-source, zero-trust runtime designed to securely execute millions of autonomous AI agents and stateful workloads on Kubernetes. It isolates agents using gVisor sandboxes or Cloud Hypervisor microVMs, protecting compute, networking, and storage resources. Its architecture maps many agents onto a smaller pool of workers to improve infrastructure efficiency. Idle agents can be suspended and restored with their memory and filesystem states intact. The platform provides cryptographic identities, default-deny networking, and external credential injection to limit security exposure. It supports standard OCI images without requiring changes to existing agent frameworks. Compatible environments include Claude Code, Codex, LangChain, and MCP servers. The project remains in pre-1.0 development.
Features
- Zero-Trust AI Agent Sandboxing
- gVisor and MicroVM Isolation
- Kubernetes-Native Agent Orchestration
- Full-State Snapshot and Resume
- Cryptographic Identity and Secure Credential Injection
- High-Density Worker Multiplexing