AI Engineer World's Fair 2026: The Runtime Is Where Agent Trust Is Won | Docker

What this post added

This post details Docker's approach to securing AI agent execution at the runtime level, addressing the "lethal trifecta" by focusing on isolation, network policy, and trusted images. It highlights the use of microVMs for sandboxing agent sessions, providing boundaries for filesystem, network, and tools. The post also discusses governing the tool layer through an organization-managed catalog for MCP servers, enforcing default-deny policies. It emphasizes that agent trustworthiness is dependent on hardening what agents build on, isolating where they run, and controlling what they can reach, all managed from a single place.