The setuid approach is smart. 1ms startup vs Docker's 50-500ms is hard to argue with.

One thing I'm wondering: how do agent dependencies work? If an agent needs npm packages or python libs, does each user home get its own install? That's the one area where containers still win.