Lizard (lizard.build) gives each AI agent a Firecracker microVM sandbox with a browser and persistent storage. Boots in ~230 ms, from $0.0162/hour.