# Microsoft announces CNCF Sandbox projects Hyperlight, AI Runway, and Unbounded

> **Key takeaway:** Microsoft is driving upstream Kubernetes extensibility through new CNCF Sandbox projects focused on hypervisor-backed isolation, multi-provider AI inference, and cross-site cluster expansion.

**Published:** 2026-11-10T16:00:00+00:00 
**Source:** Microsoft Open Source Blog 
**Category:** bigtech-foss 
**Canonical URL:** https://fosswire.org/news/microsoft-announces-cncf-sandbox-projects-hyperlight-ai-runw.html 

## Summary
At KubeCon North America 2026, Microsoft detailed several major open-source contributions aimed at moving traditionally manual or scripted operations into the Kubernetes declarative model. The announcement highlights the advancement of Hyperlight, a CNCF Sandbox project providing lightweight, hypervisor-backed isolation for cloud-native workloads. This project has integrated with the Unikraft project to support runtimes including .NET, Python, Node.js, and PowerShell.

Further developments include the introduction of AI Runway, a CNCF Sandbox project designed to manage AI inference across multiple providers using open-source engines. Additionally, the upcoming Unbounded project aims to extend Kubernetes control planes to include worker nodes on bare metal, edge devices, and other clouds via standard APIs. These efforts, alongside the Agent Substrate initiative, focus on creating portable, vendor-neutral infrastructure for secure workload execution and lifecycle management.

## Technical breakdown of Microsoft's Kubernetes contributions
- **Workload Isolation:** Hyperlight provides hypervisor-backed isolation for cloud-native tasks, utilizing extended urunc support and Unikraft integration to enable diverse language runtimes like Python and Node.js.
- **AI Inference Management:** The AI Runway CNCF Sandbox project enables native Kubernetes deployment of inference workloads, allowing users to swap between different open-source models and engines within existing workflows.
- **Distributed Control Planes:** The Unbounded project seeks to extend conformant Kubernetes control planes to heterogeneous environments, including on-premises, bare metal, and edge locations, using standard Kubernetes APIs.
- **Agent Infrastructure:** Agent Substrate focuses on portable infrastructure through pluggable snapshot storage, Kubernetes identity support, and microVM runtime reliability to allow agents to suspend, resume, or replay across different clouds.
- **Serverless Extensions:** The Lampyr project is being developed to extend Hyperlight's isolation capabilities specifically to serverless computing and lightweight Kubernetes workloads.

## Why it matters
These developments reduce vendor lock-in by providing standardized, API-driven methods to manage AI inference and distributed compute across hybrid-cloud environments. By moving isolation and agent management upstream into the CNCF ecosystem, platform engineers can implement secure, portable workflows that do not rely on proprietary cloud provider orchestration.