Agent Sandbox

An agent sandbox is an isolated execution environment that confines what an agent's tools can touch — restricting filesystem, network, and secret access to an allowed boundary. Even if the agent generates malicious or buggy code, the sandbox prevents it from reaching sensitive host resources. Sandboxing is a foundational containment control for agents that run code or interact with untrusted inputs.