Docker Sandboxes for AI Agents: Files, Secrets and Network Rules
Docker Sandboxes run coding agents in their own microVM. What that isolates compared with a container, and how to set up clone mode, proxy-injected credentials, deny-by-default network rules, kits, templates and shared skills so the isolation still holds.