interesting. how are you handling the sandboxing? we run ~10k gVisor pods for similar autonomous workloads and found that runsc memory overhead became the main bottleneck at scale.