sandbox - Abrarqasim Blogs

Docker Sandboxes for AI Agents: Why I Stopped Mounting docker.sock

Docker's new agent sandboxes put each agent in its own microVM. Here is why I'm removing docker.sock mounts from agent containers, and the hardening I'd…

Rayyan | October 9, 2026 | 9 min

Sandboxing AI-Written Python: Check for /dev/kvm First

Before you compare Python sandbox libraries, check whether your host exposes /dev/kvm. It decides which isolation tier you can actually build on.

Rayyan | August 24, 2026 | 9 min