agent-runtime

Overview ¶

Minimal agent runtime for the OCI/gVisor isolation drill. The container reads the workload spec from /fenced/input/workload.json (the task spec, which includes the goal + budget + runtime), writes the result to stdout, and exits. The OCI worker captures stdout as the attempt result.

Build (static, no CGO):

CGO_ENABLED=0 GOOS=linux go build -o agent-runtime ./deploy/oci/agent-runtime/