AX (Google)
A declarative orchestrator published by Google to run autonomous agent workloads on a cluster: each task executes in an isolated sandbox, with its repo pre-wired, its network fenced and its model provider declared. Written in Go, Apache 2.0, alpha.
Strengths
- A sandbox per task, running untrusted agent code without exposing the host
- A declarative network gateway: outbound traffic is limited to allowed hosts
- Task suspend and resume, with state persistence and resource limits
- Apache 2.0, published by Google, 5,100 stars in a few months
Limitations
- Openly alpha: the repo announces major breaking changes before a stable release
- Assumes a cluster and an ops culture, of no use on a single workstation
- Go and declarative primitives: the entry step is the Kubernetes one, not a desktop agent one
Best for
- Understanding what running agents at company scale looks like
- Following where the question of autonomous agent security in production is heading