Meta Muse's Hidden Sandbox Problem: How a KVM Escape Could Turn an AI Agent Into a Production Breach

An AI agent can be carefully isolated---and still inherit a much larger blast radius if its runtime...