All, This is a very late meeting minutes report, apologies for the slack. On June 3rd, we started discussing about the host/tenant API separation, based on Christophe's slides [1]. We identified a few steps to follow and what the end goal may look like. Our very first implementation may simply be based on an agent API restriction, and thus would restrict what use cases and workloads we'd support, there was a general agreement that this could define a good first step for us to increment on top of. The end goal could lift those restrictions up through a trusted/shadow control plane that needs to be defined further. During tomorrow's meeting, I'm proposing that we go through a summary of what our first confidential container implementation may look like. After our initial discussions around image service offloading and API restrictions, I think we start to have a clearer picture of what this very initial step may look like, and I'd like to summarize this. Then we could resume the API restrictions discussions (And summarize them for those that could not attend last week's meeting). Reminder: Tomorrow (June 10th) meeting is at 3pm UTC. Cheers, Samuel. [1] https://docs.google.com/presentation/d/1TDFwrU3rdkXSTw0XYlmuV1VzSC4GkdI2bteq...