This looks very useful. Currently we rely on Sysbox for tenant isolation for usecases like CI or agent workspaces, but if this is as simple as just setting runtime class and a little bit of configuration, I could see us replacing that entirely.