we run each agent as a persistent process in a gvisor container rather than just a stateless script. currently managing ~10k pods on k3s. the isolation is necessary because they maintain long-term state and memory.