// HACKER NEWS — CYBERSECURITY
Google's Open Agentic Orchestrator
AX sandboxes your task, wires up its workspace, fences its network, and helps you run billions of
them per cluster. Either use a single task per agent, or compose as many as your agent needs.
They are neither microservices nor batch jobs. They accumulate
state, need strict isolation, call out to model APIs and tool servers, and can burn money in a loop if nobody is
watching. AX gives you four small primitives that handle all of that declaratively.
Run untrusted agent code in a sandbox with CPU and memory limits. Cheap to create, suspend, and throw away.
List the Git repos, MCP servers, and skills an agent needs, or just describe the goal. AX sets it all up in
every sandbox before the task starts.
Define and quickly manage network policies. Lock traffic down to an explicit allowlist of hosts and
ports, inject credentials to the incoming requests.
Configure models, model parameters, and secrets in one place. Rotate a key or pin a new model version with
one apply.
AX runs on top of Agent Substrate,
a compute runtime designed from the ground up for massive density and fast stateful actor lifecycles.
Every task runs as a lightweight actor, allowing you to scale to
billions of concurrent agent sessions per cluster without orchestrator limits.
Idle agents waiting on model responses, external tool calls, or human responses are checkpointed, suspended,
and brought back
in under a second with zero cold-start delay.
Dozens of tasks share worker resources, turning idle waiting time into spare compute capacity so you only pay
when agents are actively thinking and running code.