This is a quietly important launch: cloud providers are starting to treat agents as first-class tenants rather than just another workload squeezed into existing VMs. Hardware isolation with no credentials inside targets the biggest operational fear in agentic deployments — a compromised agent pivoting through stored keys. The bet is that isolation-per-agent becomes the default security architecture for agent fleets, and whoever ships it first sets the standard. The open question is economics: a microVM per agent could get expensive at scale, so pricing will decide whether this becomes an industry pattern or a niche enterprise option. Expect AWS and Azure to answer quickly.