Sandboxing Ai Agents in Kubernetes: Why Regina Uses eBPF and Not a VM

af The Node (and more) Banter