Docker Sandbox Kits: An Open Standard for Authority as Code
In April I tested Docker Sandboxes on my MacBook and wrote up the results in Docker Sandboxes: Running AI Agents in YOLO Mode, Safely. The boundary held, but the setup around it did not travel with the agent. Network allows, secrets, and mounts stayed in my shell history. Docker has now named that missing piece. At WeAreDevelopers in September 2026 it announced the Docker Sandbox Kit Specification v3, an open standard for declaring what a workload may do, open source under Apache 2.0 at docker/sandbox-kit-spec, with the intent to bring it to the CNCF under neutral governance (partnership announcement). ...