An artificial intelligence agent sandbox creates a containment boundary around code execution and tool use. It can restrict filesystem paths, network destinations, process capabilities, secrets, resource consumption, and persistent state so a mistaken or adversarial action has a limited blast radius.
A sandbox is only effective when its boundary is stronger than the agent's available escape paths. It should use defense in depth, deny unnecessary capabilities, validate inputs and outputs, isolate credentials, record activity, and fail closed when enforcement or monitoring is unavailable.
