Google Cloud Run added a sandbox mode for untrusted AI code. It works very differently from a purpose-built agent sandbox like Upstash Box: one runs snippets inside a service you already deploy, the other gives the agent a durable computer of its own. A side-by-side look at architecture, state, security, agents, and cost.