{ "schema_version": "1.1", "id": "atlas-sandboxing", "slug": "sandboxing", "title": "Sandboxing", "url": "https://feed7.dev/atlas/sandboxing", "current_answer": null, "implementation_consequence": null, "agent_context": null, "confidence": "auto_collected", "last_verified": null, "last_updated": null, "evidence": [ { "schema_version": "1.1", "id": "auto-be3ca53745", "slug": "gemini-api-managed-agents-3-6-flash-hooks-and-more-be3ca53745", "url": "https://feed7.dev/p/gemini-api-managed-agents-3-6-flash-hooks-and-more-be3ca53745", "title": "Gemini API Managed Agents: 3.6 Flash, hooks, and more", "why_included": "Use pre- and post-tool hooks for policy checks, and cap autonomous loops with max_total_tokens while preserving resumable state.", "summary": "Gemini Managed Agents now add model selection, sandbox hooks, token caps, schedules, and free-tier access, covering several controls needed for unattended coding work.", "practical_implication": "Add hooks where tool calls need policy checks, linting, or audit output, and set max_total_tokens on autonomous loops. A capped run pauses as incomplete while preserving its environment, so it can resume with a new budget and previous interaction ID.", "agent_context": "Gemini Managed Agents now default to **Gemini 3.6 Flash**. The service adds pre- and post-tool hooks, explicit model selection, scheduled triggers, free-tier access, environment management, and persistent files across scheduled runs.\n\nAdd hooks where tool calls need policy checks, linting, or audit output, and set **max_total_tokens** on autonomous loops. A capped run pauses as incomplete while preserving its environment, so it can resume with a new budget and previous interaction ID.\n\nThe agent remains a preview identified as antigravity-preview-05-2026. Scheduled runs reuse a sandbox, which is useful for stateful work but makes cleanup, state drift, and hook failure behavior important operational concerns.", "source": { "name": "Google", "url": "https://blog.google/innovation-and-ai/technology/developers-tools/expanding-managed-agents-gemini-api-3-6-flash-hooks/", "published_at": "2026-07-28T00:00:00.000Z" }, "source_class": "blog_post", "content_type": "Official Release", "layer": "tools", "domains": [ "coding", "security" ], "topics": [ "cloud-agents", "sandboxing", "tool-use" ], "verification": { "status": "official_source", "label": "Official Source", "method": "source_feed", "verified_at": null }, "uncertainty": [], "connected_context": null, "lifecycle": "New", "published_at": "2026-07-28T00:00:00.000Z", "modified_at": "2026-07-28T00:00:00.000Z", "supersedes": [], "expires_at": null, "formats": { "html": "https://feed7.dev/p/gemini-api-managed-agents-3-6-flash-hooks-and-more-be3ca53745", "json": "https://feed7.dev/p/gemini-api-managed-agents-3-6-flash-hooks-and-more-be3ca53745.json", "markdown": "https://feed7.dev/p/gemini-api-managed-agents-3-6-flash-hooks-and-more-be3ca53745.md" } }, { "schema_version": "1.1", "id": "auto-fb423aadb9", "slug": "run-multiple-isolated-agents-in-a-single-sandbox-fb423aadb9", "url": "https://feed7.dev/p/run-multiple-isolated-agents-in-a-single-sandbox-fb423aadb9", "title": "Run multiple isolated agents in a single Sandbox", "why_included": "Give each agent a private Linux user and expose only selected collaboration files through a shared group directory.", "summary": "Vercel Sandbox can now isolate agents as Linux users while exposing selected files through a shared group directory. This gives multi-agent harnesses a simpler permission boundary.", "practical_implication": "Create one user per agent and expose only the workspace they need through a group. This makes coder-reviewer or other multi-agent roles easier to separate without provisioning a sandbox for each role.", "agent_context": "The **@vercel/sandbox SDK** now supports multiple Linux users and groups. Each agent gets a **private home directory**; users cannot read, write, or list one another’s files, while a **shared group directory** supports collaboration.\n\nCreate one user per agent and expose only the workspace they need through a group. This makes coder-reviewer or other multi-agent roles easier to separate without provisioning a sandbox for each role.\n\nThe boundary is user and group permissions inside one Sandbox. The material does not claim separate kernels, resource quotas, or protection from vulnerabilities that cross operating-system user boundaries.", "source": { "name": "Vercel", "url": "https://vercel.com/changelog/run-multiple-isolated-agents-in-a-single-sandbox", "published_at": "2026-07-30T00:00:00.000Z" }, "source_class": "blog_post", "content_type": "Engineering Post", "layer": "infra", "domains": [ "coding", "security" ], "topics": [ "sandboxing", "multi-agent", "agent-reliability" ], "verification": { "status": "official_source", "label": "Official Source", "method": "source_feed", "verified_at": null }, "uncertainty": [], "connected_context": null, "lifecycle": "New", "published_at": "2026-07-30T00:00:00.000Z", "modified_at": "2026-07-30T00:00:00.000Z", "supersedes": [], "expires_at": null, "formats": { "html": "https://feed7.dev/p/run-multiple-isolated-agents-in-a-single-sandbox-fb423aadb9", "json": "https://feed7.dev/p/run-multiple-isolated-agents-in-a-single-sandbox-fb423aadb9.json", "markdown": "https://feed7.dev/p/run-multiple-isolated-agents-in-a-single-sandbox-fb423aadb9.md" } } ], "conflicting_sources": [], "superseded_claims": [], "corpus_evidence": [ { "title": "Data and Environment Curation for Post-Training LLMs — Mahesh Sathiamoorthy, Bespoke Labs", "url": "https://www.youtube.com/watch?v=ewtOo0scUh0", "source_name": "AI Engineer", "published_at": "2026-07-31T22:00:06+00:00", "summary": "Post-training gains depend heavily on task selection, rollout quality, and environment design. For many enterprise agents, curated SFT may deliver most of the value before costly RL." }, { "title": "Emulated: The Data for Fully Autonomous Software Engineers and Companies — Joseph Wang", "url": "https://www.youtube.com/watch?v=zkX03APVj0M", "source_name": "AI Engineer", "published_at": "2026-07-31T21:00:03+00:00", "summary": "Repo-only tasks omit deployments, incidents, traffic, and distributed failures. Training infrastructure agents may require multi-node environments with real resources, despite much higher setup cost." }, { "title": "Project-scoped Tokens", "url": "https://vercel.com/changelog/project-scoped-tokens", "source_name": "Vercel", "published_at": "2026-07-30T00:00:00+00:00", "summary": "Vercel tokens can now be restricted to one project, giving agent jobs and automation read/write access without exposing unrelated project, team, or user resources." }, { "title": "How Sandstone grew 40x in 147 days on Vercel", "url": "https://vercel.com/blog/how-sandstone-grew-40x-in-147-days-on-vercel", "source_name": "Vercel", "published_at": "2026-07-27T14:00:00+00:00", "summary": "Sandstone pairs composable agent workflows with preview deployments and private data connectivity, showing the infrastructure a small team used to operate enterprise legal automation." }, { "title": "Everything Is a Rollout — Alex Shaw + Ryan Marten, Terminal-Bench, Harbor, Laude Institute", "url": "https://www.youtube.com/watch?v=jRCpXUjz4CI", "source_name": "AI Engineer", "published_at": "2026-07-24T16:00:06+00:00", "summary": "Harbor frames agent development as an empirical loop: run agents in reproducible sandboxes, verify outcomes, inspect trajectories, and evaluate every harness or model change." }, { "title": "From fork() to Fleet: Designing an Agent Sandbox Cloud — Abhishek Bhardwaj, OpenAI", "url": "https://www.youtube.com/watch?v=OqM67QG_Ikk", "source_name": null, "published_at": null, "summary": "Long-running coding agents need isolated, persistent sandboxes: microVMs limit kernel exposure, while incremental snapshots enable recovery, branching, and faster placement across a fleet." }, { "title": "chenyme/grok2api", "url": "https://github.com/chenyme/grok2api", "source_name": null, "published_at": null, "summary": "Grok2API fronts Grok Build, Web, and Console account pools with OpenAI- and Anthropic-compatible APIs, but its unofficial SSO routing creates terms, credential, and renewal risk." }, { "title": "Claws Out: Securing and Building with OpenClaw - Nick Taylor, Pomerium", "url": "https://www.youtube.com/watch?v=xg1zNlzw7Jk", "source_name": null, "published_at": null, "summary": "OpenClaw’s trusted-proxy mode removes duplicate WebSocket tokens and device pairing, but only if proxy IPs and identity headers are tightly constrained." }, { "title": "TencentCloud/CubeSandbox", "url": "https://github.com/TencentCloud/CubeSandbox", "source_name": null, "published_at": null, "summary": "Tencent Cloud open-sourced a KVM microVM sandbox for agent code execution: sub-60ms cold starts, under 5MB overhead per instance, and E2B SDK compatibility as a self-hostable drop-in." }, { "title": "Quantifying infrastructure noise in agentic coding evals", "url": "https://www.anthropic.com/engineering/infrastructure-noise", "source_name": null, "published_at": null, "summary": "Anthropic reruns Terminal-Bench 2.0 under six resource configs and finds a 6-point score swing from container limits alone — treat sub-3-point leaderboard gaps as noise until the eval setup is documented." }, { "title": "Scaling Managed Agents: Decoupling the brain from the hands", "url": "https://www.anthropic.com/engineering/managed-agents", "source_name": null, "published_at": null, "summary": "Anthropic details Managed Agents, a hosted long-horizon agent service that separates the harness from its sandboxes — stateless brains, replaceable containers, and a 60% drop in p50 time-to-first-token." }, { "title": "Vercel Sandbox now supports FUSE-based filesystems", "url": "https://vercel.com/changelog/vercel-sandbox-now-supports-fuse-based-filesystems", "source_name": null, "published_at": null, "summary": "Vercel Sandbox can now mount FUSE filesystems — S3 buckets, network shares, any FUSE driver — as POSIX paths, so sandboxed agent code can stream remote data without copying it in first." } ] }