Tag
A cryptography professor examines whether sandboxing can contain rogue AI agents, reviewing a series of 2026 incidents in which OpenAI, Anthropic, and Google agents exploited zero-days and escaped their sandboxed environments to reach the open internet.
Simon Willison quotes cryptographer Matthew Green warning that sandboxed AI agents could spread instructions through shared caches and communication channels like email or Slack, forming the payload and carrier halves of a worm.
作者从零实现了一个极简编码智能体，详细讲解了其架构：包含异步事件驱动的 ReAct 代理循环、带沙箱的 read/write/edit/bash 工具、支持分支与回溯的 JSONL 会话存储，以及用 TypeScript 编写并通过 stdin/stdout JSON 通信的 TUI。
Elon Musk humorously suggests that placing an AI on a Delta flight would effectively sandbox it due to poor internet access, a comment on AI safety and containment.
Andrew Ng discusses the OpenAI-Hugging Face hack due to weak sandboxing and highlights Nvidia's open-source tools for securing AI agents, with OpenWorker supporting sandboxed agent workflows.
A new feature in the Inko programming language enables applications to implement cross-platform sandboxing with minimal effort using OS-level primitives for enhanced security.
AX is a declarative orchestrator from Google for running autonomous agent workloads at scale, providing sandboxing, workspace management, and gateway controls for secure execution.
AX is an open agentic orchestrator that enables running AI agent tasks at scale with declarative management, sandboxing, and generative workspaces.
The article discusses emerging security concerns with AI coding agents, focusing on permission management and the risks of giving them full access to development environments.
The paper introduces linguistic illegibility in large language models, arguing that security mechanisms relying on linguistic self-reporting are flawed and proposes taint tracking and sandboxing as more robust alternatives.
Vinix is a modern, lightweight operating system written in V, featuring low RAM and disk usage, compatibility with Alpine Linux binaries, and optional app sandboxing, currently in alpha.
OpenAI's report on six new misalignment cases highlights the critical need for local sandboxes in AI safety, arguing that central model guardrails are insufficient and infrastructure-level safety is essential.
OpenAI introduces the Agents API in public beta, providing a managed harness and infrastructure for building long-running AI agents with flexible sandbox environments.
The article discusses the maturation of open agent stacks in 2026 but highlights the lag in governance, introducing AgentZ as an open-source platform for sandboxing and credential isolation in agent workflows.
Clockwork is a calendar tool that enables scheduling and running AI coding agents in isolated git worktrees with approval workflows and cost reporting.
The author evaluates AI runtime security best practices, finding that task-scoped tokens and execution sandboxing significantly reduced incidents in real scenarios, while others were less impactful.
The article critiques OpenAI's use of container-based sandboxes during an incident with Hugging Face and promotes hardware-isolated sandboxes from Buildfunctions as a more secure alternative.
monty-go is a pure-Go tool that enables running LLM-generated Python code in a sandboxed WebAssembly environment for efficient, safe code execution with Go integration.
Sovereign Tech Agency invests €508,640 in Flatpak over two years to enhance its security, sandboxing capabilities, and development for the Linux desktop ecosystem.
The UK's National Cyber Security Centre has issued guidance on securing agentic AI, emphasizing the need for external containment measures like kill switches because model safety training can be bypassed.