Google published AX, a Kubernetes-shaped orchestrator for agent workloads

Sources: primary, discussion
Summary: The README defines four declarative API kinds: Task (an isolated sandbox with CPU and memory limits), Workspace (pre-wired Git repositories, MCP servers, and skill packages), Gateway (outbound traffic locked to an explicit host allowlist), and Model (which LLM the platform itself uses, with credentials from a Kubernetes secret). Suspend and resume are CLI verbs rather than primitives. The project states that major breaking changes are expected before a stable release.
Why it matters: It treats agents as a distinct workload class, moving sandboxing, egress control, and model credentials into the scheduling layer rather than leaving each agent runtime to implement them.
Follow-up: Whether AX reaches a stable release and whether the primitives hold across agent runtimes other than Google's.