Sandboxing
Current Answer
No editorial synthesis yet — the evidence below is collected automatically from source labels. A current answer lands here once an editor approves one.
Evidence
Post-training gains depend heavily on task selection, rollout quality, and environment design. For many enterprise agents, curated SFT may deliver most of the value before costly RL.
Repo-only tasks omit deployments, incidents, traffic, and distributed failures. Training infrastructure agents may require multi-node environments with real resources, despite much higher setup cost.
Vercel Sandbox can now isolate agents as Linux users while exposing selected files through a shared group directory. This gives multi-agent harnesses a simpler permission boundary.
Vercel tokens can now be restricted to one project, giving agent jobs and automation read/write access without exposing unrelated project, team, or user resources.
Gemini Managed Agents now add model selection, sandbox hooks, token caps, schedules, and free-tier access, covering several controls needed for unattended coding work.
Sandstone pairs composable agent workflows with preview deployments and private data connectivity, showing the infrastructure a small team used to operate enterprise legal automation.
Harbor frames agent development as an empirical loop: run agents in reproducible sandboxes, verify outcomes, inspect trajectories, and evaluate every harness or model change.
Long-running coding agents need isolated, persistent sandboxes: microVMs limit kernel exposure, while incremental snapshots enable recovery, branching, and faster placement across a fleet.
Grok2API fronts Grok Build, Web, and Console account pools with OpenAI- and Anthropic-compatible APIs, but its unofficial SSO routing creates terms, credential, and renewal risk.
OpenClaw’s trusted-proxy mode removes duplicate WebSocket tokens and device pairing, but only if proxy IPs and identity headers are tightly constrained.
Tencent Cloud open-sourced a KVM microVM sandbox for agent code execution: sub-60ms cold starts, under 5MB overhead per instance, and E2B SDK compatibility as a self-hostable drop-in.
Anthropic reruns Terminal-Bench 2.0 under six resource configs and finds a 6-point score swing from container limits alone — treat sub-3-point leaderboard gaps as noise until the eval setup is documented.
Anthropic details Managed Agents, a hosted long-horizon agent service that separates the harness from its sandboxes — stateless brains, replaceable containers, and a 60% drop in p50 time-to-first-token.
Vercel Sandbox can now mount FUSE filesystems — S3 buckets, network shares, any FUSE driver — as POSIX paths, so sandboxed agent code can stream remote data without copying it in first.