Patterns · Vol. 05

Pattern

GitHub Agentic Workflows substrate

Shield enterprise environments from untrusted agent code execution by running agents in attested, kernel-enforced VM runners with hardened communication boundaries.

Classification — Tier 4 sandbox — trusted-VM-runner for CI-shaped agent workloads.

Full entry

The complete treatment — problem, how it works, when to use it, sources, and examples — lives in the volume below.

Browse the full pattern index or the catalog.