Post

Agent sandboxes are ephemeral on purpose. However, everything the agent produced dies unless it lived somewhere else. A bucket is reachable from every node.

1. With a volume plugin, 𝗰𝗿𝗲𝗱𝗲𝗻𝘁𝗶𝗮𝗹𝘀 𝗻𝗲𝘃𝗲𝗿 𝗲𝗻𝘁𝗲𝗿 𝘁𝗵𝗲 𝘀𝗮𝗻𝗱𝗯𝗼𝘅 and isolation is stronger. The keys stay in a root-owned config on the host. 2. Since mounts are reference-counted per node, 𝗼𝗻𝗲 𝗱𝗮𝘁𝗮𝘀𝗲𝘁 𝘀𝗲𝗿𝘃𝗲𝘀 𝗺𝗮𝗻𝘆 𝘀𝗮𝗻𝗱𝗯𝗼𝘅𝗲𝘀. Model weights mount read-only into every agent on a box from a single copy.