agent-substrate/substrate

Zero-trust sandboxing for millions of agents on Kubernetes. [](https://opensource.org/licenses/Apache-2.0) [](https://github.com/agent-substrate/substrate/releases) [](https://github.com/agent-substrate/substrate/actions/workflows/pr-workflow.yaml?query=branch%3Amain) [](https://github.com/agent-substrate/substrate/actions/workflows/govulncheck.yaml) [](https://github.com/agent-substrate/substrate/stargazers) Quickstart · Security · Architecture · Contributing Agent Substrate is a security-hardened, zero-trust runtime for sandboxed agents, engineered to safely run millions of agents and tools with 10x higher density than standard containers. Purpose-built for the era of autonomous agents, Substrate delivers fast resume operations in less than 500ms, with more than 500 activations per second. Agents get isolated compute, identity, networking, and storage. Sensitive credentials are kept out of reach from untrusted code. It supports multiple sandbox technologies, including microVMs and gVisor, while enabling a consistent lifecycle and management of all sandboxes. At its core, Agent Substrate maps a larger set of “actors” (stateful workloads such as agents) onto a smaller pool of ready “workers”. Because agents spend most of their lives waiting on models, tools, or humans, Substrate snapshots idle actors out of memory and…