feature · sandboxing-isolation

Sandboxing & Isolation

Taxonomy

Extrapolated — safety

5 tags · 8 out · 8 in · 3 artifacts · 1 gaps · 1 corpus docs

Catalog tags

group
other
ev:inferred
maps.dm
absent
status:absent · ev:inferred
maps.technologies
8
ev:primary
slug
sandboxing-isolation
ev:primary
title
Sandboxing & Isolation
ev:inferred

What it is

Sandboxing & isolation contain the blast radius of tool use, code execution, and computer use: VMs, containers, browser profiles, network egress allowlists, ephemeral disks, and secrets kept out of the sandbox. It is the difference between an agent that can click a portal and an agent that can ransack a laptop.

OWASP ASI05 (unexpected code execution) and computer-use deployments without isolation are known failure modes.

Why it matters

Portal/computer-use paths are necessary for real ops data; without isolation they are unacceptable inside a company boundary.

Related features

Browser & Computer Use, Security, Identity & Governance, Emergency Control / Kill Switch

Catalog links

Graph edges for this feature — technologies, category lens, companies, DM.

Technologies

features/sandboxing-isolation/README.md

Artifacts

  • dm_mapabsent
  • readmepresent · features/sandboxing-isolation/README.md
  • technologies_mappresent · features/sandboxing-isolation/technologies.md

Gaps

  • G_DM_CROSSWALKsev 3

    feature missing document-management.md

Out · maps_to (8)

  • aidertechnology · primary · features/_source/feature-technology-map.json
  • continuetechnology · primary · features/_source/feature-technology-map.json
  • daytonatechnology · primary · features/_source/feature-technology-map.json
  • e2btechnology · primary · features/_source/feature-technology-map.json
  • jupyter-enterprise-gatewaytechnology · primary · features/_source/feature-technology-map.json
  • open-interpretertechnology · primary · features/_source/feature-technology-map.json
  • openhandstechnology · primary · features/_source/feature-technology-map.json
  • swe-agenttechnology · primary · features/_source/feature-technology-map.json

In · maps_to (8)

  • aidertechnology · primary · features/_source/feature-technology-map.json
  • continuetechnology · primary · features/_source/feature-technology-map.json
  • daytonatechnology · primary · features/_source/feature-technology-map.json
  • e2btechnology · primary · features/_source/feature-technology-map.json
  • jupyter-enterprise-gatewaytechnology · primary · features/_source/feature-technology-map.json
  • open-interpretertechnology · primary · features/_source/feature-technology-map.json
  • openhandstechnology · primary · features/_source/feature-technology-map.json
  • swe-agenttechnology · primary · features/_source/feature-technology-map.json

Corpus tags (document_tags)

feature
sandboxing-isolation
kind
feature_readme
quality
ok
slug
sandboxing-isolation
technology
aider
continue
daytona
e2b
jupyter-enterprise-gateway
open-interpreter
openhands
swe-agent

Corpus documents (1)

feature_readme · 1

  • Sandboxing & Isolation · ok

    features/sandboxing-isolation/README.md

Research path: features/sandboxing-isolation