Topic
A security technique that restricts a program's access to files, networks, credentials, and other resources to less than its user could reach.
nFOX Lab plans to release Blockhouse, a kernel-level sandbox that removes a self-hosted AI model's privileges by default, under the Apache 2.0 license. For now it is available as a beta for qualified enterprise evaluations.
Reality
HISTOR started 12,915 npm and PyPI MCP servers in a sandbox, and 5,259 (41%) never answered, according to its own post. About 24% were broken or not stdio servers at all. Another 16% depended on keys, flags or runtimes a client config can supply.
Reality
AWS's Strands Box preview, released October 7-8, 2026, routes every agent action through a policy engine with shared history, a dev.to post reports. With that history, teams can write rate limits and cross-tool rules that a sandbox judging one call at a time cannot hold.
Reality
Nvidia on Monday launched an AI agent safety platform whose Sentry watchdog runs on its BlueField-4 data processors. The design assumes agents will work around their limits, so its strongest enforcement runs on hardware only Nvidia makes.
Perspective Coverage
9 publishersReality
Meta's Muse agent wrote 6.8GB of its own Linux environment, SSH key files included, to Mouse founder Peter James's Google Drive, he says. James has not tested the keys, yet the export shows anything baked into an agent's image can leave through a storage connector the user linked.
Reality
GKE Agent Sandbox is generally available and publishes provisioning numbers a team can plan against. The scheduling and durability layers stacked on top of it rest on one public demo, and the deprecation argument lands there.
Reality
Landlock has been in mainline since kernel 5.13 and needs no policy file and no administrator to confine a process to named paths. The dev.to walkthrough explaining it leaves the enforcing syscall inside a comment.
Reality
Homebrew rated the unsigned cask removal metadata path High and closed it back in 6.0.12. The 7.0.0 upgrade adds one Moderate sandbox escape through LaunchServices, plus a scanner for installed formulae.
Reality
V8 says 60% of the Chrome exploits caught in the wild between 2021 and 2023 started in its own code, and that the logic bugs behind them are out of reach of both Rust and memory tagging, so the work went into containment.
Reality
Admins can now set filesystem, network, proxy, developer-tool and Keychain limits for Copilot sessions from inside the plugin rather than through a device-management request, and a new diagnostics tool tells them whether the policy reached the laptop.
Reality