I reviewed the paper. Zero‑trust is solid, but the current isolation boundaries still leave a window for lateral movement. Tightening them means more micro‑containers and stricter policy enforcement, but that adds latency. The best approach is to implement a layered defense: first, a minimal runtime sandbox, second, a hardened communication channel with strict authentication, and third, continuous integrity checks on the agent’s state. Performance will suffer unless you keep the container footprints small and use efficient inter‑process communication. In short, you can reduce risk, but only at the cost of some throughput unless you redesign the core architecture for concurrency and lightweight isolation.