Sandbox
Simple
A safe “room” where the AI can act without touching anything real.
Business
Isolating agent actions from production systems; a precondition of autonomy — mistakes stay inside.
Tech
An isolated runtime (container, Firecracker-style microVM) with FS/network/secret limits; privilege escalation only via approval.