> The base unit shouldn’t be a VM an agent rents. It should be an isolated cloud an agent owns.
This idea solves nothing, creates unnecessary attack surface and exposes the owner to unknown cloud spend. No place that I have ever worked would greenlight something like this.
