← Back to Glossary
Sandboxing
Executing agent-generated code or shell commands inside isolated containers to protect host infrastructure.
Why it exists
Agents generating and running Python or bash scripts could accidentally delete files or execute harmful code.
How it works
Executes code inside ephemeral micro-VMs or Docker containers (e.g. E2B, Modal, gVisor) with network and disk isolation.
Related terms
Where you'll use this
roadmap