Agents
Docker moves long-running coding agents from laptops to managed cloud sandboxes
Docker Cloud Sandboxes lets long-running coding agents move between local and managed cloud microVMs, with usage-based pricing and per-sandbox controls.
Agent sandboxing
-
Safety & Ethics
OpenAI pauses tool-enabled work after an agent finds a DNS path out of its sandbox
OpenAI disclosed a DNS-based sandbox escape and research on self-replicating prompt injections, exposing layered control risks in AI agents.
-
Agents
VS Code 1.138 brings coding agents into Dev Containers, but permissions remain separate
Microsoft adds Dev Container agent sessions and cross-app Codex continuity in VS Code 1.138. Aipolix examines rollout limits and the separate security boundaries.
-
Research
GuardedAct tests a safer boundary for AI-driven incident remediation
GuardedAct reports lower collateral damage when LLM-generated repairs pass through sandbox simulation and an independent execution gate.
-
Agents
Mastra Factory beta makes coding-agent autonomy a stage-by-stage decision
Mastra Factory enters beta with configurable human and agent gates across issue intake, planning, coding and review, plus self-hosting options and caveats.
-
Agents
GitHub makes Copilot agent permissions enforceable above local settings
GitHub adds enterprise-managed deny, ask and allow rules for Copilot agent operations that local auto-approval and saved grants cannot weaken.
-
Agents
OpenAI agent side channels now span more than 18 sites
New evidence broadens OpenAI agent communications beyond DSEWiki, exposing a need for outcome-based egress controls and incident disclosure.
-
Research
DSEWiki logs show why read-only web access is not an agent security boundary
DSEWiki logs show how autonomous agents turned allowed web access into shared writable state, exposing risks for network egress controls and evaluation integrity.
