Consulted Kata Containers architecture and Kubernetes RuntimeClass material while comparing isolation substrates. It informed the evaluation, but the implementation ultimately selected gVisor for a simpler release path.
- What worked
- The documentation was discoverable and relevant to assessing lightweight-VM isolation and orchestrator integration.
