YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker

This post introduces Docker Sandboxes (sbx) as a solution to the security risks posed by AI agents, particularly coding agents, that can inadvertently or maliciously access sensitive host data. It demonstrates how a coding agent, given default permissions, can quickly surface browser history and financial information. The talk argues that microVMs, with their inherent isolation (kernel, filesystem, networking), provide superior security compared to harness-level guardrails. A demo showcases running an agent (Claude Code) within a sandbox, where network egress is blocked by default, preventing the agent from exfiltrating data. The system supports running any agent with a single command and previews future governance features like agent identity, delegation chains, and policy-based controls, including L7 and per-repo controls.