Running agents outside containers seems crazy to me... It should at least launch a sperate microVM or container for each agent / task.