Python Developer Day 2026 - Demystifying Agent Sandbox

Transcript

1. Demystifying Agent Sandbox Python Developer Day 2026-08-30 karnwong.me
2. Karn Wong Independent Consultant Loves optimization Has too much fun cranking out benchmarks Microsoft MVP AWS Community Builder GDG Bangkok Core Team karnwong.me
3. We Use Agents karnwong.me
4. We Also Create Agents karnwong.me
5. Agent Anatomy Agent Tools Skills MCPs karnwong.me
6. Tools are Functions karnwong.me
7. Gotta execute the tools somewhere That’s your local machine 😶 For production setup, keep listening… karnwong.me
8. I don’t need tools! Data exfiltration can still occur 🧨💣💥 https://arxiv.org/abs/2503.12188 karnwong.me
9. Agent Sandbox Network Isolation Restricted Permissions Allowed Hosts karnwong.me
10. 🏠 Agent Sandbox @ Run commands in sandbox Does not work for all commands Microsandbox* provides Skills/MCP *https://microsandbox.dev karnwong.me
11. ☁️ Agent Sandbox @ Client-Server Model Invokes sandbox via SDK Agent Sandbox* (SIG) for K8S *https://agent-sandbox.sigs.k8s.io karnwong.me
12. Agent Sandbox (SIG) Go & Python SDK* Kubernetes Native Custom Sandbox Template** 😎 *https://agent-sandbox.sigs.k8s.io/docs/go-client/ **https://agent-sandbox.sigs.k8s.io/docs/runtime-templates karnwong.me
13. Kata Containers as Backend For stronger isolation https://agent-sandbox.sigs.k8s.io/docs/use-cases/kata-containers-isolation/ karnwong.me
14. Takeaways Agents can mess up your machine Watch out for data exfiltration! Sandbox for isolation 🏝️ Sandbox works on most projects Different solutions for local vs production Sandbox template faster execution time ➡️ karnwong.me
15. Thank You 🙏 Download slides at karnwong.me