Sandbox

You might say

Both sandboxing and command confirmation are meant to protect my computer. What does each one limit?

An isolated execution environment restricting the files, network, and system resources accessible by untrusted code or automated tasks.For example, an AI tool may let commands write only inside the current workspace and restrict network access, reducing the chance that a bad script affects unrelated files. A sandbox may use OS controls, containers, or virtual machines, and its strength depends on the actual boundary. Mounted sensitive folders, injected real keys, and allowed networks remain accessible to code inside it.

How does a sandbox isolate untrusted code from the host?

Agent process

Tries to read files or access the network

meets boundary

File / network boundary

Defines which resources can be reached

allows or blocks

Access allowed / denied

The system returns an observable result

A Sandbox is a runtime boundary; it reduces blast radius but does not replace permissions, review, or user approval.

What does a sandbox do?

Provide a restricted runtime: Code runs under OS sandbox controls, in a container, or in a virtual machine with limited files, processes, and network access.

Reduce host impact: A poisoned dependency or bad command is less able to read or modify sensitive host files even if it damages the sandbox.

Limit inputs first: Mount only what is needed, use mock data, and control the network instead of passing production credentials into the sandbox.

Quick checkChoose the best answer

Which setup combines sandbox isolation with least privilege when the AI debugs a database?

Run in a sandbox with only the needed code mounted and a test or mock data connectionPass production database admin credentials into the sandbox because containers protect all data automaticallySet permission mode to allow and use that instead of environment isolation

You can say this to an AI Agent

Prepare an isolated environment for the test code with only the project code/ directory mounted and a mock data connection. State the file and network boundaries; do not inject production keys or database credentials.

Learn next

1Permission Mode→2Project Rules→3API Key→

Recommended tool

Web fine-tuning tool · Selector Pro

Select page elements for precise AI edits

Click a button, text, or card, note the change, then copy its exact location to AI.

Open Selector Pro website