AI coding agents are brilliant, until they decide your laptop is a playground.

This Docker episode breaks down Docker Sandboxes: an experimental way to run coding agents in a containerised workspace that mirrors your repo, so the agent can run commands, install packages, and edit files without having free rein over your host.

They also dig into why a sandbox is more than "just a container" and why microVM isolation is the next step for defence in depth.