You Gotta Keep the Dogs Away: YOLO Developer Workflows with a Coding Agent in a Box
summary
Docker builds a fast micro‑VM sandbox called SBX that runs coding agents in YOLO mode while isolating secrets and network egress via an egress proxy. Demo shows a malicious Maven build that exfiltrates keys on the host but is blocked inside SBX, and Testcontainers‑based tests run unchanged inside the sandbox. The VM boots in ~1–2s, each sandbox has its own Docker daemon and image cache is intentionally isolated; kits/templates let teams preconfigure images, policies and secret mappings.
AI-written summary · about
chapters (10)
- 0:00Introduction and AI skepticism
- 8:54Skinner boxes and agent workflows
- 12:29Eight levels of AI adoption
- 16:21Why sandboxing agents matters
- 21:37Docker’s sandboxing evolution
- 29:39Demo: blocking supply chain attacks
- 36:02Demo: Testcontainers in sandboxes
- 38:51Multiplexing agents and templates
- 41:02Feedback and community resources
- 41:45Q&A session
related talks
34mYOLO Developer Workflows with a Coding Agent in a Box
33mYour Coding Agents in YOLO Mode… Safely
26mrm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)
32mLLMs Behind Bars: Sandboxes at Scale for AI on a Short Leash
25mPlease Sandbox your AI Agents
34mZero Secrets: Building Secure Infrastructure for AI Agents
39mTrust, but Sandbox: Securing AI Agents in Kubernetes
27mYomi: a real-life sandbox architecture and implementation