# Google Open-Sources Scion, a Container-Based Hypervisor for AI Agents - Date: 2026-04-07 - Category: Agentics Scion runs AI agents in isolated containers with their own git worktrees and credentials, betting that infrastructure-level isolation is enough and --yolo mode inside containers is safe enough. No pre-built binaries; K8s has rough edges. ---