kubernetes: One run. One pod. Nothing shared.

# run pod spec (example, trimmed)
apiVersion: batch/v1
kind: Job
metadata:
  name: run-7f3a
  namespace: convops-runs
spec:
  backoffLimit: 0
  activeDeadlineSeconds: 14400   # executor time limit
  template:
    spec:
      automountServiceAccountToken: false
      restartPolicy: Never
      securityContext:
        runAsNonRoot: true
        seccompProfile: { type: RuntimeDefault }
      initContainers:
        - name: github-mcp           # native sidecar
          image: example/github-mcp
          restartPolicy: Always
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: { drop: ["ALL"] }
      containers:
        - name: agent
          image: example/agent-claude-code
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: { drop: ["ALL"] }
          envFrom:
            - secretRef: { name: run-7f3a }
          volumeMounts:
            - { name: task, mountPath: /work }
      volumes:
        - name: task
          persistentVolumeClaim:
            claimName: task-8c1e

# values.yaml (example)
runs:
  namespace: convops-runs
  podSecurity: restricted
  networkPolicy:
    ingress: none
    egress: limited
  timeLimit: 4h
  taskVolume:
    size: 10Gi
models:
  existingSecret: model-credentials

# run namespace network policy (example)
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: runs-isolation
  namespace: convops-runs
spec:
  podSelector: {}
  policyTypes: [Ingress, Egress]
  ingress: []          # no ingress at all
  egress:
    - ports:
        - { port: 443, protocol: TCP }

{
  "task": "Fix refund rounding",
  "executor": "isolated-sonnet",
  "status": "succeeded",
  "pushed": "convops/task/8c1e",
  "tokens": { "input": 151200, "output": 30800 },
  "models": { "sonnet": 0.91, "haiku": 0.09 },
  "cost_usd": 1.94,
  "turns": 34,
  "duration_s": 700,
  "outcome": "succeeded"
}