This is a killer niche. Integrated Postgres solves the biggest headache with ephemeral sandboxes—actually keeping the agent's memory. 300ms is already solid, but getting under 100ms usually means moving from "booting" to Firecracker Snapshots.
If you haven't yet, look into pre-warming TAP devices and bypassing the HTTP API for direct process management. Exciting stuff!