Not a model. Not LangGraph.

AgentCore is how an agent leaves your laptop.

Any framework, any model. Isolation, identity, tools, policy, memory that outlives the process.

Laptop agent to Runtime microVM to Gateway policy to tools, with Memory and Identity on the sidelaptopRuntimemicroVMGatewaypolicytoolsIdentityMemory
Laptop → Runtime microVM → Gateway (policy) → tools. Identity and Memory on the side.

The problem

The loop works. Production is a different job.

A graph can retry, branch, and wait. That is LangGraph. Tuesday's traffic, two customers on one host, Slack as Maya, a $500 cap that is not a prompt, memory that is still true next month — that is AgentCore.

The model

Four beats on the factory floor.

Hold these. The rest of the services plug in.

01

Session

A dedicated microVM. Isolated files. End it, it is sanitized. Not a checkpointer.

02

Identity

Inbound: who may call. Outbound: Slack as Maya. Cognito, Okta, Entra. No rebuild.

03

Gateway + Policy

Wrap APIs and Lambda as MCP. Cedar or NL intercepts every tool call. Deterministic.

04

Memory

Short-term is this session. Long-term is next month. The checkpointer is a different clock.

Two doors

Pick a track.