Why Your Host Machine Needs Docker Sandbox - Part-1
Autonomous AI coding agents—such as Claude Code, Antigravity ( agy ), Aider, and custom in-house tools—have fundamentally changed software development. We have moved past simple autocomplete and static code generation into an era where LLMs have an interactive bash sub-shell with the autonomy to run commands, install packages, inspect directories, and edit files directly. Giving an autonomous process raw terminal access on your primary development workstation introduces real risks to your local environment. This post explores the operational and security risks of running agents natively, contrasts Soft Guardrails vs. Hard Isolation , and demonstrates why running agents inside Docker Sandbox ( sbx ) provides the containment needed for modern AI workflows. 1. The Reality of Running Agents on Your Host Machine When an autonomous CLI agent runs directly on macOS or Linux, it inherits the current user's security context and shell permissions: [Host Ter...