Docker Sandboxes puts coding agents behind a microVM and network policy

Docker Sandboxes uses microVM-based isolation for coding agents. Its product page shows a workspace mounted into a sandbox and a network policy that can deny traffic by default while allowing named hosts. Why it matters: An isolated agent still depends on its mounts, egress rules, and credentials. Those controls are the operating surface to inspect before an agent touches a codebase.

Try this: Before delegating a coding task, create a disposable sandbox with egress denied by default. Allow only the hosts you need, then verify mounted folders and available credentials.