Production agent infrastructure — sandboxing, self-healing & trust incidents

Managed runtimes and software factories are converging around isolation, lifecycle persistence, checkpoint/resume, governed tools, replay, rollback, observability, evaluator/healer loops, and cost controls. Deep-agent and SRE-agent patterns reinforce the value of explicit verification and bounded remediation, while portability, overhead, independent reliability evidence, and safe rollback remain open.