Docker's new sbx runtime walls AI agents off in microVMs with per-sandbox egress policy
Docker Sandboxes (sbx) is Docker's new isolation runtime: instead of plain containers, coding agents run inside microVMs with hardware-enforced separation and per-sandbox controls on files, network access, and secrets. It's already a supported agent runtime in GitHub Agentic Workflows and ships via yolo-mode defaults plus release candidate and nightly builds. The login-gated egress rules users are hitting are the intended policy layer, not a bug — the trade for handing agents a wide-open blast radius.