Docker Cloud Sandboxes: Recap from WeAreDevelopers | Docker

This post announces the launch of Docker Cloud Sandboxes, extending the concept of local sandboxes to the cloud for longer-running agent tasks. It introduces the open Sandbox Kit specification for defining agent environments and their access requirements, with a commitment to bring it to the CNCF. The post also emphasizes the importance of runtime governance for AI agents, detailing how Docker's approach focuses on containment, control, choice, and capacity, and how this enables security teams to govern agent activity through capabilities as code and manifest inspection. It highlights the use of microVMs for isolation and the integration of audit records for investigation.