37
sandbox
A sealed place the agent can run commands. Network, filesystem, and secrets are opt-in.
What is sandbox?
A sandbox is an isolated runtime: the agent may compile and test without touching your real home directory, your prod DB, or the public net unless you opened a hole.
Why does sandbox matter when vibe coding?
Tool-using agents are useful because they run things. They are dangerous for the same reason. A sandbox is a guardrail that does not rely on the model’s manners.
How do you do sandbox?
Run agents in a sandbox by default. Allow the test command. Deny `rm -rf`, prod URLs, and `.env`. If a task needs the network, open it for that turn only.
How do you ask a model for sandbox?
You are in a sandbox. No network unless I say so. No files outside (paths). No secrets. Run (test command) as much as you want.
What goes wrong with sandbox?
Disabling the sandbox because “it could not pip install.” That error was the sandbox doing its job. Allow the one registry, do not open the world.