Sandboxed Agents: Building Isolated, Governed and Scalable AI
How do you give an AI agent the tools it needs while controlling which files, environments, models, and services it can access? And Where does your Agents leak Tokens?
Join the inaugural AAIF Boston event, sponsored by solo.io for a technical session on Agent Substrate, an open-source runtime for managing sandboxed agent workloads on Kubernetes and token leakage with Agents
We will explore how Kubernetes primitives and an agent-specific control plane work together, how Substrate Actors share a pool of workers, and what that means for isolation, resource usage, and responsiveness. The session will examine the idea of running 200+ agents across a small pool of Kubernetes pods, including the workload assumptions behind that density and token leaks in MCP-based Agents
What you will learn
- How Kubernetes primitives support the infrastructure for sandboxed agents.
- How an agent-specific control and management plane handles actor placement and lifecycle.
- Where to enforce access to files, commands, production environments, model endpoints, MCP tools, and credentials.
Speaker - Michael Levan, Principal AI Architect/FDE
Where Your Agent Leaks Tokens
Your agent’s actual request is about 1.6% of the tokens it sends. The rest is tool schemas, history, and raw results re-read on every turn. Hugi will walk through four token leaks in MCP-based agents (catalog, payloads, cache misses, blind spots), demo the same prompt in three tool modes with live token counts, and share what to measure first.
Speaker: Hugo Guerrero is a Senior AI Architect and Evangelist at Solo.io
Who should attend
AI engineers, platform engineers, SREs, security engineers, FDEs, and developers building or operating agent systems. Familiarity with Kubernetes will help. This is a technical talk and discussion.
About AAIF Boston
AAIF Boston brings together developers, researchers, and practitioners to share technical work, useful artifacts, and lessons from building agentic AI. Events are vendor-neutral and focus on engineering practice.
All participants must follow the Linux Foundation Events Code of Conduct.
Registration information is handled under the Linux Foundation Privacy Policy.
Learn more about Agent Substrate
---