Sandboxing isolates what an agent can do when it runs code or interacts with tools.
Common Controls
- Egress allowlists
- Time, CPU, memory quotas
- Filesystem isolation
- MicroVMs (e.g., Firecracker), container sandboxing, WASI
Trade-off
There is a real trilemma between strong isolation, performance, and operational simplicity.