Sandboxes and Policies for AI Agents: A Practical Architecture for Your First Deployment

An agent reads a repository, edits a function, and runs the tests. Then it encounters a README instruction asking it to upload its environment variables for “debugging.” A prompt telling it not to rev