Google Open-Sources Scion: A 'Hypervisor for Agents' Orchestration Testbed with Container Isolation and Git Worktrees

InfoQ·medium signal

Google released Scion on April 7 as open-source infrastructure for running multi-agent AI systems with hard isolation guarantees. Each agent gets its own container (Docker, Podman, Apple containers, or Kubernetes), git worktree, and credentials — enforcing safety through outside boundaries rather than context-window constraints. Scion orchestrates 'deep agents' (Claude Code, Gemini CLI, Codex) as isolated concurrent processes across local machines, remote VMs, or Kubernetes clusters, with a demo game (Relics of the Athenaeum) showcasing multi-agent collaboration.