AI Coding Live News

Google Donates Agent Substrate, gVisor, and OpenRL to CNCF; Agent Substrate 1.0 GA on GKE

On 2026-11-05 Google Cloud announced donating Agent Substrate, gVisor, and OpenRL to the CNCF (Sandbox accepted) and that Agent Substrate reached 1.0 with Agent Substrate on GKE generally available. Vendor claim: idle agents snapshot and resume on any ready Worker in under 500ms at about 10x container density.

Google Donates Agent Substrate, gVisor, and OpenRL to CNCF; Agent Substrate 1.0 GA on GKE

Key Takeaways

  • Official: @GoogleOSS 2026-11-05 17:05 UTC; Google Cloud blog; VP Drew Bradstock
  • Donation: Agent Substrate, gVisor, and OpenRL enter CNCF Sandbox; gVisor on a path toward Incubation
  • GA: Agent Substrate 1.0 / Agent Substrate on GKE; managed or self-host on any Kubernetes
  • Vendor figures: resume <500ms, ~10x density, >500 suspend/resume per second; microVM or gVisor
  • Entry points: ate.dev / gvisor.dev / openrl.dev
Read full story

GitHub Agentic Workflows 0.89.22: Cloud Hypervisor-only sandbox, hosted-web domain policy, grouped audit

GitHub shipped gh-aw (Agentic Workflows) v0.89.22 on 2026-09-27: docker-sbx/gVisor sandboxes are removed in favor of Cloud Hypervisor only; frontmatter gains network.hosted-web allow/block lists for provider-hosted Claude/Codex web tools; gh aw audit --group aggregates findings by run/code; Copilot prompts over 100 KiB stream via stdin. Also adds repo-memory backend, MCP payload size reporting, and tighter firewall checks.

GitHub Agentic Workflows 0.89.22: Cloud Hypervisor-only sandbox, hosted-web domain policy, grouped audit

Key Takeaways

  • Shipped: v0.89.22 — docs at github.github.com/gh-aw / gh.io/gh-aw
  • Breaking: docker-sbx/gVisor removed; set sandbox.agent.runtime to cloud-hypervisor
  • network.hosted-web frontmatter policies for hosted Claude/Codex web tools
  • gh aw audit --group aggregates findings; MCP payload sizes reported
  • Copilot prompts >100 KiB stream via stdin; repo-memory backend for AIC guardrail
Read full story