AI agents now run thousands of ephemeral coding tasks a day, and each one needs a clean, fast, trustworthy environment to execute in. This talk shares hands-on lessons from building secure execution infrastructure for AI workloads at Incredibuild and islo.dev, covering CI runners, sandboxes, snapshots, caching, traces, and reproducible environments. It walks through a real sandbox provider for ephemeral task isolation, presented at an Apache Airflow Monthly Town Hall, and a meta-harness loop that took a coding agent from 0 of 5 to 5 of 5 passing tasks in about two seconds across four proposer steps. Drawing on earlier container security work at Twistlock, the talk covers what breaks when isolation, caching, and observability have to work together at CI speed.
Yossi Eliaz is a Principal Engineer, AI Systems at Incredibuild, building secure execution infrastructure for AI workloads: CI runners, sandboxes, snapshots, caching, and reproducible environments. He previously worked on container security at Twistlock. He holds a PhD in Physics and an MSc in Computer Science.
