Kubernetes, mark II? Why Google’s giving away gVisor, a code sandbox used by Anthropic and OpenAI

What happened

Google announced on Thursday that it is donating three of its AI agent infrastructure projects—gVisor, Agent Substrate, and OpenRL—to the Cloud Native Computing Foundation. The donation aims to establish these tools as industry standards for secure and efficient AI agent operations. These technologies are already in use at companies like Anthropic and OpenAI to isolate and manage AI workloads. The transition to foundation governance includes plans for external maintainers and a new model to prevent any single company from controlling the projects.

Key details

• gVisor was first open-sourced by Google in 2018 to improve container security.
• Agent Substrate 1.0 has been officially released and is now generally available on Google Kubernetes Engine.
• OpenRL was introduced in June and supports reinforcement learning on Kubernetes infrastructure.
• The Cloud Native Computing Foundation accepted gVisor's application in late September, with onboarding beginning the following week.
• OpenAI and Anthropic both use gVisor to securely execute code generated by their AI models.

Why it matters

AI companies, cloud providers, and startups that rely on secure code execution now have access to these tools under neutral governance, which can lower barriers to adoption and improve security standards. The move allows organizations without large security teams to use off-the-shelf sandboxing and agent management solutions, reducing the risk and cost of developing their own. The new governance model also means no single company will control the future direction of these projects, potentially increasing trust and collaboration across the industry.