Definition
Plain language
An isolated computing environment where AI code can run without affecting anything important.
As stated in the literature
An isolated execution environment, often a container or VM, used to run untrusted or experimental code with controlled access to resources.
Why it matters: Sandboxes are the first line of defense whenever you let an AI execute arbitrary code, since they bound the blast radius of mistakes or attacks.
For example, when an AI agent wants to run a downloaded script, it executes it inside a sandboxed container that can't see the user's home directory or the wider network.
Heard on the show
“The thing that refused, when anything refused at all, wasn't the sandbox.”Episode 227 — Poisoned Bug Reports Fooled Coding Agents Two Times Out of Three