Bring your own agent to a contained SAP Kyma sandbox with OpenRouter
Plug OpenRouter – a public LLM aggregator – into a contained sandbox with three off-the-shelf coding agents powered by free NVIDIA Nemotron models
🎓 See it live — SAP TechEd 2026 (XP266)
XP266 | Ship your own sandboxed AI operations agent to Kyma in two hours.
Deploy a reasoning agent into Kyma, connect it to SAP AI Core, give it full observability — and cause a failure yourself to watch it diagnose what broke.
The bring-your-own-model fourth tier in this post is one of the patterns you'll build on in the room.
In the room there's an even easier on-ramp: workshop attendees get a one-click, no-terminal path — a dispatchable GitHub Action that runs this whole exercise (pick an agent, pick a free model) and prints a verdict table with the containment proof.
No shell, no local setup — try every agent in a couple of clicks.
| Session code | XP266 |
| Type | Hands-on workshop |
| Venue | Messe Berlin — Messedamm 22, 14055 Berlin |
| Room | Hands-On Room 6 |
| Date | 27 October 2026 (conference 27–29 October) |
| Time | 13:30 – 15:30 |
- Register / learn more: SAP TechEd 2026 ·
- The exercise is open-source at SAP-samples/teched2026-XP266 (public by 26 October 2026, EOD) — see Exercise 5
This is a follow-up to Giving an AI agent a shell — without giving away the keys to your cluster.
That post built the contained sandbox on SAP Kyma: the box is the boundary, three trust tiers, and an agent that reasons through a frontier model it never holds the key to.
Here we add a fourth tier — an external provider — and run somebody else's coding agents on a free public model, without loosening a single guarantee.
