Из ленты dev.to devops — кратко, чтобы не потерять.

AI coding agents are getting better fast. But the uncomfortable question is not only “can the model write code?” It is also: Where does that generated code run? Running agent-generated code directly on your main machine is convenient, but it also expands the permission surface: files, secrets, network access, local services, browser sessions, and sometimes even production credentials. That is why projects like sandboxd are worth watching. What is sandboxd? sandboxd describes itself as an open-source engine for AI app-builder products. In plain English, it provides the backend layer for products where a user types something like: “Build me a todo app” and a working app appears at its own preview URL. According to its README, sandboxd can: create an isolated Linux container for each sandbox;


Полный текст и контекст у первоисточника: https://dev.to/tenglongai2026/every-coding-agent-needs-a-sandbox-sandboxd-shows-why-15pg