Hosted agents run in an isolated execution sandbox
that provides a dedicated, secure runtime per agent session. Sessions start
with a clean environment with no shared state between sessions, no
cross-session data leakage, and strong compute boundaries between tenants.