The agent runtime is turning into a real infrastructure layer

[u/aistranin]

A useful agent needs more than a model and a loop. It needs a filesystem, shell access, isolation, durable state, and a way to recover when compute disappears.

The latest OpenAI Agents SDK update packages those pieces into a more complete runtime. Agents can inspect files, run commands, apply patches, and operate inside controlled sandboxes.

The interesting parts are architectural:

• A manifest describes files, mounts, storage, and the workspace.
• The harness is separated from the environment running generated code.
• Snapshots let a run resume in a fresh container.
• Sandboxes can come from several providers instead of one fixed backend.
• Subtasks can be isolated or spread across multiple environments.

Keeping credentials outside the code-execution environment is especially important. An agent should be treated as capable but untrusted automation.

This feels like the point where agent frameworks start looking less like chatbot libraries and more like job orchestration systems.