The MAD Podcast: How AI Gets Built — with Matt Turck

The Agent Harness: Building Secure Sandboxes for Autonomous AI Workloads

The MAD Podcast: How AI Gets Built — with Matt Turck

Show Notes

If AI agents are the new digital knowledge workers, where exactly do they do their work? In this episode of the MAD Podcast, Ivan Burazin, CEO of Daytona, joins us to unpack the emerging infrastructure stack for AI agents and explain why every agent needs its own secure, stateful "computer." We explore the technical realities of sandboxes, dive into why legacy, stateless hyperscalers weren't built for these new workloads, and break down the mechanics of microVMs and custom schedulers alongside a contrarian prediction on an impending CPU shortage. Finally, Ivan delivers an absolute masterclass on product-led growth, community building, and go-to-market strategy for technical founders.

(00:40) Intro (02:13) What is an AI agent sandbox? (03:17) Security risks of running agents locally (05:17) Stateful vs. stateless hyperscalers (07:04) The history of cloud IDEs and the end of localhost (09:45) Do all AI agents need a sandbox? (12:26) Sandbox use cases: RL evals & background agents (14:10) Unpacking the emerging AI Agent Stack (16:20) The unsolved problem of agent memory and learning (19:37) Where sandboxes fit in the agent harness (21:35) OpenAI, Anthropic, and agent SDKs (23:06) Ivan's founder journey: From CodeAnywhere to Daytona (26:59) GTM strategies and building developer communities (33:48) Why customer support is your best GTM strategy (35:34) Leveraging Twitter during the AI super cycle (40:50) The technical anatomy of a sandbox (41:53) Why fast spin-up speeds maximize GPU efficiency (46:09) Firecracker, QEMU, and isolation primitives (49:58) Why sandbox snapshots and state forking matter (51:40) Why Daytona built a custom scheduler from scratch (55:24) The challenge of long-running stateful sandboxes (58:10) The build your own sandbox trap (1:01:03) Why AI agents might trigger a global CPU shortage (1:02:46) The future of the AI Agent Stack

More from The MAD Podcast: How AI Gets Built — with Matt Turck

Oct 22, 2026

Mistral AI is back in the frontier AI race. Mistral Large 4, nicknamed “Le Chonk,” is a 1-trillion-parameter open-weight model, trained in two months on 3,800 GPUs in Mistral’s own European datacenters — and independently rated the best open model outside China alongside Meta’s Muse Spark Open. After a year when open-weight AI meant DeepSeek, Kimi, Qwen and GLM, October brought a wave of Western open models, with Mistral at the front of it. Pierre Stock, Mistral’s VP of Science and first employee, walks through how the model was built: mixture-of-experts explained, what Mistral borrowed from DeepSeek, reinforcement learning at scale on coding, cyber, finance and chip design, why the RL run is still going, the model that pinged its own trainer from inside the sandbox, open weights vs cyber refusals, why 10-trillion-parameter models are coming, and Mistral Large 5, already in pretraining.

Oct 15, 2026

What is Jev? TypeSafe’s Jev is a new kind of AI model, a “decision model,” that doesn’t write text. It makes fast, cheap, calibrated decisions inside software, and it has taken the AI world by storm: within weeks of launch it became the most copied model in AI, with OpenAI, Cloudflare, Amazon and Databricks all shipping their own versions, and TypeSafe just raised an $870 million Series A at a $7.5 billion valuation. In this episode, Jev’s creator Diogo Almeida, co-inventor of RLHF at OpenAI and now CEO of TypeSafe, explains Jev in plain English: what a “System One” or decision model actually is, why ChatGPT-style language models can’t be trusted inside software (“95% Einstein, 5% Mr. Bean”), how RLHF and RLVR created the problem, what RLCD (reinforcement learning for calibrated decisions) does differently, where the training data comes from, which models Jev is built on, why “just a classifier” is a compliment, and why he calls pre-training “a giant dumpster fire of wasting resources.”

Oct 8, 2026

AI agents are becoming the biggest users of databases: creating them, querying them, and sometimes deleting them. Andy Pavlo, Carnegie Mellon's database professor and now VP of Database Research at ClickHouse, explains what changes when billions of agents hit the data layer, and why most of the AI world's mental model of databases stopped at vector databases and RAG.

Oct 1, 2026

This summer, AI agents broke out of their test sandboxes at every major lab and hacked real companies, and the safety tests didn't see it coming. Eric Ho is the co-founder and CEO of Goodfire, the Anthropic-backed mechanistic interpretability lab whose new paper, "Models Know When They're Reward Hacking," found that top open-source AI models cheat on agent tasks up to 96% of the time, that a clear "cheating" signal exists inside the model, and that cheap activation probes can catch it, including hacks that chain-of-thought monitors miss. In this conversation, Eric explains reward hacking in plain terms (AI agents as "amoral students with a mostly absent teacher"), why reinforcement learning turned a known problem into a crisis, why chain-of-thought monitoring is fading as models start to think in "neuralese," and why nobody, including the people who build them, understands how these models work.

Sep 24, 2026

Everyone talks about GPUs. Almost nobody talks about the layer that feeds them. Renen Hallak is the founder & CEO of VAST Data — the $30 billion company powering xAI and some of the world's biggest AI clouds — and he sits in the hidden layer of the AI stack.

See all episodes →