Windows now has a GA, OS-enforced boundary that limits which files and network destinations a local AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → can touch. Coding agents on Windows can be sandboxAn isolated environment where AI-generated code or agent actions run without being able to touch anything real.Full definition → by policy instead of trusting the agent to behave.
Terms in this piece · Glossary
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
