sandboxing
EXO keeps an agent's memory outside the code the agent rewrites News
The EXO agent runtime splits a self-modifying agent into a disposable policy layer and a durable state layer, so an agent can rewrite its own prompts, tools and executor code without being able to damage its own event log, secrets or history.
Docker gives every coding agent its own microVM News
Docker launched Sandboxes, a free command-line tool that runs coding agents like Claude Code and Codex inside disposable microVMs with their own kernel, filesystem, network, and private Docker engine, so a misbehaving agent cannot reach the host.
Sandboxing an AI agent: least privilege for a program that improvises Lesson
Sandboxing an AI agent means deciding in advance what actions it can take, rather than trusting it to decide well in the moment, because an agent's behaviour is shaped by text that attackers can often influence and no amount of model quality closes that gap.
exe.dev Tool
Persistent Linux virtual machines built for AI agents, with root access, SSH, a public hostname, a real network stack, and secrets injected by a host-side proxy rather than handed to the agent. Priced two ways: pooled capacity for steady workloads and per-second usage billing for bursty ones.
EXO / exoharness Tool
Agent runtime that separates a disposable executor holding prompts, model calls and tool use from a durable harness holding the event log, secrets, artifacts and snapshots, so an agent can rewrite its own policy and still stop, resume, fork or rewind against intact history.
Docker Sandboxes (sbx) Tool
Free command-line tool that runs coding agents inside disposable microVMs with their own kernel, filesystem, network, and private Docker engine, so an unsupervised agent cannot reach the host. Supports Claude Code, Codex, Copilot, Cursor, Gemini and others on macOS, Windows, and Linux; commercial use included at no cost.