google/ax ? reverse-engineered prompt

Build me a Kubernetes style control plane and CLI for running agent tasks in sandboxes.

I want to be able to write simple YAML files for things like a Task, Workspace, Gateway, and Model, then apply them from a command line tool and watch them run. The system should spin up isolated task sandboxes, connect the right workspace repositories and other setup, lock down network access to only allowed hosts, and let me pause, resume, and shell into a running task when debug mode is on. It should feel a lot like kubectl, with commands like apply, get, describe, watch, delete, suspend, resume, and ssh.

Please make it work with Kubernetes, use gRPC for the control plane and CLI communication, and include a basic demo flow and example manifests so I can try it end to end. If you need current docs or API details, look them up online as you go.