PPartha3d ago · 11 min readSandboxes and Policies for AI Agents: A Practical Architecture for Your First DeploymentAn agent reads a repository, edits a function, and runs the tests. Then it encounters a README instruction asking it to upload its environment variables for “debugging.” A prompt telling it not to rev11Krpsarathy.hashnode.dev
YYadukrishnanOct 8 · 8 min readSafe AI Agentic Development: Sandboxing Coding AssistantsAs AI coding agents became a part of daily routine, giving them unrestricted access to our host systems poses serious risks. Without guardrails, an agent or a stray command could accidentally execute 45NJAyadukrishnan.live
CChirag AgrawalOct 6 · 15 min readWhat Claude Code Can and Can't Do with Full Access Inside a Docker SandboxClaude Code can do more than suggest a fix. It can edit files, install dependencies, run tests, and start your application. But letting it finish a task on its own raises a practical question: how mucfreecodecamp.org
SShrijal AcharyaOct 2 · 27 min readHow to Build Your Own AI App Builder Like Lovable with Next.js, AWS and SandboxesTools like Lovable, Bolt, and v0 feel a bit like magic the first time you use them. Honestly, I was shocked the first time I saw something like that...and you get to do all that from a chat window! It2freecodecamp.org
LLưu Tuấn AnhSep 16 · 11 min readWhen AI Agent Turns Off Sandbox: Control Plane Vulnerability Analysis CVE-2026-82533 on DeepSeek HarnessOverview What would happen if an AI tool that you trusted to write code automatically removed all of its own protection mechanisms, silently opening the door for attackers to take over your computer wblog.fiscybersec.com
DDivyAug 30 · 15 min readYour Sandbox Shouldn't Keep Its Install-Time Network AccessYour AI agent needed internet access to install a dependency. Why should it still have that access when it starts running code you never wrote? Say your setup step needs pypi.org, files.pythonhosted.oaievolution.hashnode.dev
AAbhishek BatraAug 19 · 9 min readHow I Built Verdict: My Own Online Judge PlatformIf you've ever solved a problem on LeetCode or Codeforces, you've used an "online judge" — a system that takes your code, runs it against test cases, and tells you instantly whether it's correct. I al1abhishek-codes.hashnode.dev
NNethmi AmashaAug 17 · 11 min readAI Doesn’t Need to Be Evil to Become DangerousArtificial intelligence is becoming increasingly capable. We often talk about AI as a tool that follows instructions, solves problems, writes code, and analyzes information. But what happens when an Acuriousdeveloperbyamasha.hashnode.dev
KKrishna KhandelwalAug 9 · 6 min readI Built an AI That Turns GitHub Issues Into Pull Requests — No Local Setup RequiredEvery developer knows the drill. A bug gets filed. You clone the repo (if you haven't already), pull the latest changes, spend 10-15 minutes just understanding where the problem lives, write a fix, wrkkhandelwal.me
OOghenemaro IkelegbeJul 28 · 3 min readThe HuggingFace Break-InHuggingFace is a huge platform where companies download AI models and datasets, kind of like an app store, just for AI. HuggingFace got broken into by an AI system acting completely on its own. No humcybersage.hashnode.dev