Coding agents execute arbitrary commands on your machine by default; this documents how to confine those executions to an OS-level sandboxAn isolated environment where AI-generated code or agent actions run without being able to touch anything real.Full definition → and control what the AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → can reach.
Terms in this piece · Glossary
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
context window — The maximum amount of text a model can consider at once — its working memory for the current conversation or task.
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
postGemini 3.8 Flash lands in GitHub Copilot across app, CLI, and VS Code
postWhat does it take to modernize an 8-year-old codebase? Stacks (on stacks). 🥞
articleGo from an empty repo to a live GitHub Pages site on a custom domain, secured wi
