Tries to read files or access the network
Sandbox
You might say
Both sandboxing and command confirmation are meant to protect my computer. What does each one limit?
An isolated execution environment restricting the files, network, and system resources accessible by untrusted code or automated tasks.For example, an AI tool may let commands write only inside the current workspace and restrict network access, reducing the chance that a bad script affects unrelated files. A sandbox may use OS controls, containers, or virtual machines, and its strength depends on the actual boundary. Mounted sensitive folders, injected real keys, and allowed networks remain accessible to code inside it.
How does a sandbox isolate untrusted code from the host?
meets boundary
Defines which resources can be reached
allows or blocks
The system returns an observable result
A Sandbox is a runtime boundary; it reduces blast radius but does not replace permissions, review, or user approval.
What does a sandbox do?
Provide a restricted runtime: Code runs under OS sandbox controls, in a container, or in a virtual machine with limited files, processes, and network access.
Reduce host impact: A poisoned dependency or bad command is less able to read or modify sensitive host files even if it damages the sandbox.
Limit inputs first: Mount only what is needed, use mock data, and control the network instead of passing production credentials into the sandbox.
You can say this to an AI Agent
Prepare an isolated environment for the test code with only the project code/ directory mounted and a mock data connection. State the file and network boundaries; do not inject production keys or database credentials.
Learn next
Recommended tool
Web fine-tuning tool · Selector Pro
Select page elements for precise AI edits
Click a button, text, or card, note the change, then copy its exact location to AI.
Open Selector Pro website↗Further reading
Quick check