A sandbox without a network boundary is only half a sandbox
Source
vercel.com
Author
Brandon Tuttle
Date
Why it matters
Prompt-injected code needs no VM escape to exfiltrate — one unaccounted network path is enough. The named egress failure modes are a checklist for any sandboxAn isolated environment where AI-generated code or agent actions run without being able to touch anything real.Full definition → you run AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition →-generated code in.
Terms in this piece · Glossary
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
tool permissions — The rules governing which tools an agent may call and which need confirmation — the boundary between a mistake and an incident.
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
