Sandbox
An isolated or restricted environment designed to limit the effects of agent actions.
Illustrative conversation
- Why can the agent run our tests but not read my SSH keys?
- Its sandbox exposes the project and required commands while keeping unrelated files outside the workspace boundary.
Definition
A sandbox is an execution boundary where an agent can run commands and change files without receiving unrestricted access to the surrounding machine. The application decides which workspace contents, filesystem operations, network destinations, and processes are available. Isolation reduces the blast radius of mistakes, but it still needs permissions, validation, and careful handling of sensitive data.
Reviewed