Agent Security
Sandbox
Also: sandboxing, agent sandbox
An isolated environment, such as a container or micro-VM, where an agent runs with limited access to files, network and credentials.
In more detail
A sandbox contains the damage when an agent misbehaves or is hijacked. Good sandboxes restrict the filesystem to the project, cut or filter network access and keep real credentials out. A sandbox is a boundary, so its strength is how hard it is to cross: shared kernels, mounted host paths and ambient credentials all weaken it.