Sandboxed Single-Tenant Actors
diff --git a/site/layouts/docs/single.md b/site/layouts/docs/single.md
new file mode 100644
index 0000000000..576e9123cc
--- /dev/null
+++ b/site/layouts/docs/single.md
@@ -0,0 +1,16 @@
+{{/*
+Copyright 2026 Google LLC
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/ -}}
+{{- partial "raw-markdown.html" . -}}
diff --git a/site/layouts/index.llms.txt b/site/layouts/index.llms.txt
index a21bf41525..b7023b25bd 100644
--- a/site/layouts/index.llms.txt
+++ b/site/layouts/index.llms.txt
@@ -15,25 +15,76 @@ limitations under the License.
*/ -}}
# Agent Substrate
-> Agent Substrate is an open source, secure-by-default agent execution runtime that runs millions of sandboxed agents (microVMs and gVisor) at up to 10x higher density than standard container runtimes. It runs on Kubernetes, which manages the machines, while its own control and data plane handle sub-500ms suspend and resume.
+> Agent Substrate is an open source, zero-trust runtime for running millions of stateful sandboxed agents on Kubernetes with sub-500ms suspend and resume.
-Agent Substrate decouples the logical **Actor** (a stateful agent or workload instance addressed by `(atespace, name)` and instantiated from an `ActorTemplate`) from the physical **Worker** (a pre-warmed Kubernetes Pod in a `WorkerPool`). Idle actors are checkpointed to object storage (GCS or S3) and evicted from compute; when a request arrives with the `ate-target-actor:
/` header, the Substrate router (`atenet`) and control plane (`ate-api-server`) assign a ready worker and the node-level supervisor (`atelet`) coordinates with the in-pod sandbox herder (`ateom`) to restore the actor's memory and filesystem state in under 500ms—bypassing the Kubernetes control plane on the request path.
+Agent Substrate maps stateful **Actors** (addressed as `/` and created from an `ActorTemplate`) onto smaller pools of pre-warmed **Workers** (Kubernetes Pods in a `WorkerPool`). Idle actors checkpoint their memory and filesystem state to object storage (GCS or S3) and release compute. When a request arrives with the `ate-target-actor: /` header, `atenet-router` parks the request while `ate-api-server` assigns a ready worker, `atelet` streams the snapshot on the node, and `ateworker` restores the sandbox off the Kubernetes control-plane path.
+
+Every actor runs inside a Cloud Hypervisor microVM or gVisor (`runsc`) sandbox. Plain Linux containers are unsupported. Actors hold zero ambient credentials inside the sandbox and start with default-deny networking. Outbound traffic traverses `atunnel` (authenticated with a short-lived per-actor SPIFFE X.509 certificate) to `atenet-egress`, which enforces `EgressPolicy` host allowlists and injects external credentials or actor JWTs out of band.
+
+Substrate splits its APIs between cluster infrastructure and tenant workloads. Infrastructure resources (`WorkerPool`, `SandboxConfig`, `CSIDriverConfig` under `ate.dev/v1`) are Kubernetes CRDs reconciled by `atecontroller` and managed with `kubectl`. Workload and access resources (`Atespace`, `ActorTemplate`, `Actor`, `Tag`, `EgressPolicy`, `AccessPolicy`) live in PostgreSQL behind `ate-api-server`'s gRPC Control API (`api/ateapi/v1/ateapi.proto`) and are managed with `kubectl ate` or gRPC clients. Agent Substrate is a Cloud Native Computing Foundation sandbox project originally created by Google.
## Consolidated Reference Bundle
-- [Full Documentation Bundle (llms-full.txt)]({{ "llms-full.txt" | absURL }}): Single-file compilation of all Agent Substrate conceptual, architecture, how-to, CLI reference, API, and security documentation for AI context windows.
+- [Full Documentation Bundle (llms-full.txt)]({{ "llms-full.txt" | absURL }}): Single-file Markdown compilation of all Agent Substrate documentation.
+{{- $repo := site.Params.github_repo -}}
+{{- $branch := site.Params.github_branch | default "main" -}}
{{- $docs := site.GetPage "/docs" -}}
+{{- $projectSection := false -}}
{{- if $docs -}}
-{{- range $section := $docs.Sections.ByWeight }}
+{{- range $section := $docs.Sections.ByWeight -}}
+{{- if eq (path.Base $section.Path) "project" -}}
+ {{- $projectSection = $section -}}
+{{- else if $section.RegularPages }}
## {{ $section.LinkTitle | default $section.Title }}
-{{- range $p := $section.RegularPages.ByWeight }}
-- [{{ $p.Title }}]({{ $p.Permalink }}): {{ with $p.Params.description }}{{ replaceRE `\s+` " " (strings.TrimSpace .) }}{{ else }}Agent Substrate documentation for {{ $p.Title }}.{{ end }}
+{{- range $p := $section.RegularPages.ByWeight -}}
+{{- $params := partialCached "page-params.html" $p $p.Path -}}
+{{- $url := $p.Permalink -}}
+{{- with $p.OutputFormats.Get "markdown" -}}
+ {{- $url = .Permalink -}}
+{{- end -}}
+{{- $statusPrefix := "" -}}
+{{- with $params.status -}}
+ {{- $statusPrefix = printf "[Status: %s] " (title .) -}}
+{{- end -}}
+{{- $desc := "" -}}
+{{- with $params.description -}}
+ {{- $rawDesc := partial "rewrite-repo-links.html" (dict "content" (strings.TrimSpace .) "dir" (path.Dir ($p.Params.repo_source | default "")) "absolute" true "markdown" true) -}}
+ {{- $desc = replaceRE `\s+` " " $rawDesc -}}
+{{- else -}}
+ {{- $desc = printf "Agent Substrate documentation for %s." $p.Title -}}
+{{- end }}
+- [{{ $p.Title }}]({{ $url }}): {{ $statusPrefix }}{{ $desc }}
+{{- end -}}
+{{- if and $repo (eq (path.Base $section.Path) "reference") }}
+- [Control Plane gRPC Proto (ateapi.proto)]({{ printf "%s/blob/%s/api/ateapi/v1/ateapi.proto" $repo $branch }}): Canonical protobuf service and resource definitions for Atespace, ActorTemplate, Actor, Tag, EgressPolicy, AccessPolicy, and Worker.
+- [WorkerPool CRD]({{ printf "%s/blob/%s/manifests/ate-install/generated/ate.dev_workerpools.yaml" $repo $branch }}): OpenAPI v3 Kubernetes CustomResourceDefinition schema for `ate.dev/v1` `WorkerPool`.
+- [SandboxConfig CRD]({{ printf "%s/blob/%s/manifests/ate-install/generated/ate.dev_sandboxconfigs.yaml" $repo $branch }}): OpenAPI v3 Kubernetes CustomResourceDefinition schema for `ate.dev/v1` `SandboxConfig`.
+- [CSIDriverConfig CRD]({{ printf "%s/blob/%s/manifests/ate-install/generated/ate.dev_csidriverconfigs.yaml" $repo $branch }}): OpenAPI v3 Kubernetes CustomResourceDefinition schema for `ate.dev/v1` `CSIDriverConfig`.
+- [Metrics & Events Registry]({{ printf "%s/tree/%s/docs/metrics/registry" $repo $branch }}): OpenTelemetry Weaver schema defining emitted metrics, log events, and attributes.
+{{- end -}}
{{- end -}}
{{- end -}}
{{- end }}
## Optional
-
-- [Tutorials Overview]({{ "docs/tutorials/" | absURL }}): Interactive step-by-step example workloads demonstrating stateful actors, sandboxes, request parking, egress, and multiplexing.
-- [GitHub Repository](https://github.com/agent-substrate/substrate): Source code, issue tracker, manifests, and release artifacts for Agent Substrate.
+{{- with $projectSection -}}
+{{- range $p := .RegularPages.ByWeight -}}
+{{- $params := partialCached "page-params.html" $p $p.Path -}}
+{{- $url := $p.Permalink -}}
+{{- with $p.OutputFormats.Get "markdown" -}}
+ {{- $url = .Permalink -}}
+{{- end -}}
+{{- $desc := "" -}}
+{{- with $params.description -}}
+ {{- $rawDesc := partial "rewrite-repo-links.html" (dict "content" (strings.TrimSpace .) "dir" (path.Dir ($p.Params.repo_source | default "")) "absolute" true "markdown" true) -}}
+ {{- $desc = replaceRE `\s+` " " $rawDesc -}}
+{{- else -}}
+ {{- $desc = printf "Agent Substrate documentation for %s." $p.Title -}}
+{{- end }}
+- [{{ $p.Title }}]({{ $url }}): {{ $desc }}
+{{- end -}}
+{{- end -}}
+{{- with $repo }}
+- [GitHub Repository]({{ . }}): Source code, issue tracker, manifests, and release artifacts for Agent Substrate.
+{{- end }}
diff --git a/site/layouts/index.llmsfull.txt b/site/layouts/index.llmsfull.txt
index aca8a4b256..5df43cc7a7 100644
--- a/site/layouts/index.llmsfull.txt
+++ b/site/layouts/index.llmsfull.txt
@@ -13,9 +13,9 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/ -}}
-# Agent Substrate — Full Documentation Bundle (llms-full.txt)
+# Agent Substrate: Full Documentation Bundle (llms-full.txt)
-> Complete machine-readable compilation of Agent Substrate's Get Started guides, Concepts, Architecture, How-to Guides, Reference (API, CLI, Glossary, Metrics), Security, Tutorials, and Project documentation.
+> Complete Markdown compilation of Agent Substrate's Get Started guides, Concepts, Tutorials, How-to Guides, Reference, Security, and Project documentation.
> Canonical index: {{ "llms.txt" | absURL }}
{{- $docs := site.GetPage "/docs" -}}
@@ -27,6 +27,9 @@ limitations under the License.
SECTION: {{ upper ($section.LinkTitle | default $section.Title) }}
PAGE: {{ $p.Title }}
URL: {{ $p.Permalink }}
+{{- with $p.OutputFormats.Get "markdown" }}
+MARKDOWN: {{ .Permalink }}
+{{- end }}
{{- with $p.Params.repo_source }}
SOURCE: {{ . }}
{{- end }}
diff --git a/site/testdata/repo/docs/plain.md b/site/testdata/repo/docs/plain.md
index 1ac6ede2eb..9fc416e97d 100644
--- a/site/testdata/repo/docs/plain.md
+++ b/site/testdata/repo/docs/plain.md
@@ -6,3 +6,5 @@ Plain body before rule.
---
Plain body after rule.
+
+`echo "$SHELL_VAR" 'quotes'`
+
+
## What is Agent Substrate?
-Agent Substrate is a security-hardened, zero-trust runtime for sandboxed agents, engineered to safely run millions of agents and tools with 10x higher density than standard containers. Purpose-built for the era of autonomous agents, Substrate delivers fast resume operations in less than 400ms, with more than 1500 activations per second. Agents get isolated compute, identity, networking, and storage. Sensitive credentials are kept out of reach from untrusted code. It supports multiple sandbox technologies, including microVMs and gVisor, while enabling a consistent lifecycle and management of all sandboxes.
+Agent Substrate is a security-hardened, zero-trust runtime for sandboxed agents, engineered to safely run millions of agents and tools with 10x higher density than standard containers. Purpose-built for the era of autonomous agents, Substrate delivers fast resume operations in less than 500ms, with more than 500 activations per second. Agents get isolated compute, identity, networking, and storage. Sensitive credentials are kept out of reach from untrusted code. It supports multiple sandbox technologies, including microVMs and gVisor, while enabling a consistent lifecycle and management of all sandboxes.
At its core, Agent Substrate maps a larger set of “actors” (stateful workloads such as agents) onto a smaller pool of ready “workers”. Because agents spend most of their lives waiting on models, tools, or humans, Substrate snapshots idle actors out of memory and restores them when a request arrives.
diff --git a/api/ateapi/v1/ateapi.pb.go b/api/ateapi/v1/ateapi.pb.go
index 44de8a372c..cb23d97db8 100644
--- a/api/ateapi/v1/ateapi.pb.go
+++ b/api/ateapi/v1/ateapi.pb.go
@@ -3135,7 +3135,10 @@ type SnapshotConfig struct {
// storage_location is the base object-storage URI snapshots of actors on
// this version are stored under. If unset, ate-api-server's
// --snapshot-location is used. Requires the PerTemplateSnapshotLocation preview
- // gate.
+ // gate. Each path segment may contain only ASCII letters, digits, '_' and
+ // '-'. Each owner's snapshots are stored under
+ //