Is Docker good enough isolation for AI-written code? Convince me either way.

Our take: containers share the host kernel, so for untrusted code a microVM is the safer wall, and kosa8's boot in about 0.5s, so speed isn't the trade-off it used to be.

The counterargument: gVisor and seccomp profiles go a long way, and VMs add complexity.

Where do you land, and what's your threat model?