Unprivileged isolation on Agent Workstation Isolation Primitives
6Startup Latency (ms)Sandlock
Evaluation Results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Sandlock2026.05 | 6 | — | — | — | — | — | — | — | — | |
| firejail/bwrap2026.05 | 30 | — | — | — | — | — | — | — | — | |
| Firecracker2026.05 | 100 | — | — | — | — | — | — | — | — | |
| gVisor2026.05 | 200 | — | — | — | — | — | — | — | — | |
| Docker (rootless)2026.05 | 300 | — | — | — | — | — | — | — | — |