Sandboxing Ai Agents in Kubernetes: Why Regina Uses eBPF and Not a VM

od The Node (and more) Banter