← All IntelClip / AI AgentsEphemeral sandboxes for agent code execution
From Agents in Production: How OpenGov Built and Scaled OG Assist - Gabe De Mesa, OpenGov · ≈11:14
Describes on-demand, torn-down-after-use isolation as the default containment strategy for agents that write and run code in production.
What’s in it
- Describes on-demand, torn-down-after-use isolation as the default containment strategy for agents that write and run code in production.
Clip transcript
Sandboxing. So, another thing that we, uh, worked on, um, kind of similar to the safety slide we just saw was, um, whenever an agent tries to execute code or tries to create files, it does so in a sandbox. So, we gave our agents sandboxes such that it could spin up these sandboxes on demand and it could use those sandboxes to honestly write code, execute code, create files and it's kind of this safe ephemeral isolated space such that the agent can can can take action in there and not and we don't have to worry about uh any risk to you know our our production systems. Um and it's it's really cool cuz they also get uh tied uh tear down at the end so um in this example I said, "Hey, create a PDF uh for the folks of the AI Engineer Conference 2026." And um allow me to download it so I could share it with them. And you could see that the agent created this really cool PDF inside of that sandbox. So just really wanted to cover the sandbox feature and just give you a brief kind of overview of of sandboxing.
Comments
Sign in to comment.
Loading comments…