Session
A dedicated microVM. Isolated files. End it, it is sanitized. Not a checkpointer.
Not a model. Not LangGraph.
Any framework, any model. Isolation, identity, tools, policy, memory that outlives the process.
The problem
A graph can retry, branch, and wait. That is LangGraph. Tuesday's traffic, two customers on one host, Slack as Maya, a $500 cap that is not a prompt, memory that is still true next month — that is AgentCore.
The model
Hold these. The rest of the services plug in.
A dedicated microVM. Isolated files. End it, it is sanitized. Not a checkpointer.
Inbound: who may call. Outbound: Slack as Maya. Cognito, Okta, Entra. No rebuild.
Wrap APIs and Lambda as MCP. Cedar or NL intercepts every tool call. Deterministic.
Short-term is this session. Long-term is next month. The checkpointer is a different clock.
Two doors