How I Learned to Stop Worrying and Love the Sandbox — Matt Brockman, E2B

This talk details the practical engineering challenges and solutions for managing agentic sandboxes, moving beyond theoretical interfaces to concrete operational concerns. It demonstrates how to make sandbox operations concrete through deliberately broken environments for capture-the-flag style exercises, covering resource identification (CPU, memory, disk), cleanup of runaway processes, and state preservation using templates and snapshots. The talk also addresses scaling these operations from single sandboxes to hundreds or thousands by discussing lifecycle management (idle timeouts), user-to-sandbox mapping for persistent workspaces, and filesystem caching strategies. Key takeaways include the trade-offs of state restoration and the importance of tracking resource access and cleanup.