Tag

network

3 entries, including 1 pattern.

1. 5 Sept

   Sandbox on is not containment

   A sandbox label does not mean the agent is cut off from the estate. If the host can reach the VPN and the cloud APIs, so can the agent.

   • agents
   • sandbox
   • threat-model
   • network
2. Pattern5 Sept

   Verified Agent Containment

   A control pattern for security architects and platform teams who run coding agents or MCP-backed tools on shared hosts. It replaces the comfort label “sandbox on” with an explicit, checkable isolation boundary so the agent cannot silently inherit the estate’s network paths and cloud identity.

   • agents
   • sandbox
   • credentials
   • threat-model
   • network
3. 31 Aug

   Loopback is not a trust boundary

   Binding an unauthenticated model API to every interface is not loopback. The sandbox can still hold while the agent is owned.

   • inference
   • network
   • sandbox