Sandboxing Agents That Run Code

An agent with a shell inherits everything the shell can reach — your files, your keys, your network. A sandbox replaces per-command permission prompts with an enforced boundary: a short list of files, hosts and credentials the code can touch, and nothing else.