Per DeepSeek's September 2026 arXiv paper, a production unit serves about 3 million sandboxes a day, supports over 380,000 concurrent and creates more than 5,000 per second. The paper states that agent execution is untrustworthy and that no single mechanism can prevent all agent misbehavior, so it relies on layered isolation and observability.