HOW WE BUILT SECURE, SCALABLE AGENT SANDBOX INFRASTRUCTURE

Summary from the TLDR AI newsletter

There are two ways to sandbox an agent that can execute code: isolate the tool or isolate the agent. Agents should have nothing worth stealing and nothing worth reserving. Isolating the agent requires an extra network hop on every operation and more services to deploy, but there are no secrets to steal, no state to preserve, and agents can be killed, restarted, and scaled independently.