DOCKER SANDBOX KIT SPEC: AUTHORITY AS CODE

Summary from the TLDR DevOps newsletter

The Docker Sandbox Kit Specification v3 defines how to package an agent's permissions and dependencies as an ordinary OCI image. The format specifies network rules, credentials, and volumes, allowing developer tooling to scan, sign, and diff agent authority changes. Docker Sandboxes is the first conforming runtime for the open source specification.