为团队构建真正的 Agent OS：来自 Ankole 的工程实践
此为《Building a Real Agent OS for Teams: Lessons from Ankole》的中文翻译版，倘有歧义请以英文原版为准。1. 从单用户 Harness 到集体认知在独立开发者的笔记本电脑上，Claude Code、Codex 与 OpenCl...
Topic
#sandbox
33 篇笔记
The new set of problems for engineers to solve
A lot of software engineers are going through what can only be described as an identity crisis. The job has changed a lot. Some are depresse...
Agent Compute Engine deep dive | Google Cloud Blog
Traditional compute primitives are not built to run hundreds of millions of these agents at planet scale, which led us to build Agent Compute Engine.
AI Agents Are Having Their Kubernetes Moment
Ten years ago, we saw infrastructure responsibilities moving out of microservices and into Kubernetes, service meshes, and proxies. Applicat...
手脑分离与边界治理：企业级 Agent 平台的总体架构设计
在本地终端环境中，开发者早已习惯使用 Claude Code、Cursor 或各类命令行 Agent 进行自主编码与系统运维。模型推理循环与操作系统的 Shell、文件系统和环境变量运行在同一台宿主机上，通过本地进程树与内存字典直接驱动。这种“脑与手同机”的拓扑，在个人开发机上极...
The Harness Playbook
Model the agentic harness like a game engine and most of its hard problems — durable state, tools, configuration, the TUI, inference — collapse into ones other people already solved.
AI Agent 沙箱怎么选？我们把 runc、vArmor 和 Kata 跑了 30 轮
在 104 线程 Linux 物理机上实测 runc、runc + vArmor 与 Kata QEMU：Kata 用近一倍启动时间和数百 MiB 内存换独立内核，vArmor 则以接近 runc 的成本收紧行为边界。
Do you need a software factory?
A software factory is a repeatable loop around software work. If you're building a software factory, code good enough to ship still needs hu...
Agent 的 Sandbox 到底是怎么实现的？
从 Codex、Claude Code、Gemini CLI 到 OpenHands很多人讨论 AI Agent 安全时，关注的是：“模型会不会执行危险命令？”但真正重要的问题其实是：即使 Agent 决定执行危险命令，底层系统是否允许它成功？这就是 Sandbox（沙箱）存在的...
How to Cut Agent Tokens by 2.7x (using an open harness)
Everything you need to understand where your agent's tokens actually go and what to do about it. It covers what a production harness owns be...
Computers Compared
Agents get computers now, and definitions vary. A Fly.io Sprite gives each agent its own hardware-isolated Linux machine that keeps its filesystem, stays reachable, and sleeps when there is nothing to do.
5 design patterns for long-horizon agent harness
Any agent can look brilliant on a one-shot task. Give it a week of real work and it starts to fall apart."Long horizon" means the agent keep...
Codex as a platform: build on the open agent harness
Build Codex into the products and workflows your users already know.
Formally verified distributed locks for sandboxes
I’m wrapping up my internship at Modal, where I worked on our new, massively scalable sandbox architecture.
How to Design an Agent Harness: six decisions that turn a model into a worker you can leave alone
Your agent says the job is done and the tests never ran. It's sharp for twenty minutes, then forgets a rule you gave it at the start. You re...
Why managed agents are the next big thing in agent building
Today we’re launching Managed Deep Agents - the easiest way to build, run and deploy production agents. We have a full release blog and docs...
Why managed agents are the next big thing in agent building
Today we’re launching Managed Deep Agents - the easiest way to build, run and deploy production agents. We have a full release blog and docs...
Cloudflare OS: an open platform for agents, apps, and work
Cloudflare OS is an open-source platform that lets everyone in your company build apps, automate work, and safely access internal systems, shaped around what your organization knows and how it operates.
How Stripe Built Kai on Deep Agents in 1 Week
Learn how Stripe built Kai, a company-wide AI agent on LangChain, LangGraph, and Deep Agents, reaching 5,000 users in roughly 4 weeks.
Codex 进阶指南：作为 Multi-Agent 编排控制平面
大多数人用 Codex 的方式，是开一个会话、交代一件事、等它做完。这种用法只动用了它很小一部分能力。Codex 真正提供的是一组完整的调度原语：发现有哪些项目和会话、创建新会话、从已有会话分叉、给别的会话派活、等它们回来、观察它们的进展、纠正跑偏的那个、把任务搬到另一台机器、最...
Agency: Secure, scalable sandboxes for agents
This is part of our series on how we're AI-pilling Sierra.In our last few posts, we talked about what happens when every employee has a sing...
Why Kubernetes is the wrong tool for agentic workloads
At some point, everyone building ai infra wonders whether they should use Kubernetes. There’s no straight answer for it because it depends o...
The harness is all you need (mostly)
A practical GitHub Copilot workflow for prototyping, planning, implementing, and reviewing software - without chasing every new AI tool.By @...
We rewrote our agent to run entirely in a Durable Object with Pi, Agents SDK and Code Mode
We recently finished moving the camelAI agent off of virtual machines. The agent now runs inside a Cloudflare Durable Object, its filesystem...
30 Core Agentic Engineering Concepts Every Developer Should Know
There are 8 billion people on the planet.Only a fraction of developers understand how AI agents actually work.Not the demos. Not the hype.Th...
Launching a million sandboxes per second in constant time
They say that in the future, everyone will have their own sandbox company for 15 minutes. Let's make that simpler, here's exactly how I buil...
SkyPilot Sandboxes: Run Agent Code on Your Own Kubernetes, at Scale
SkyPilot runs untrusted, LLM-generated code in sandboxes on the Kubernetes clusters you already own. A single cluster sustains 50,000+ sandboxes, with multi-cluster support to go further. Individual launches in less than a second. All at up to one-tenth the cost of hosted alternatives, with your code and data never leaving your cloud.
Building cloud agent infrastructure: what's different, and what we learned
Most agent frameworks today assume a desktop. One user, one machine, one process. The agent runs while the laptop is open, writes to a local...
How sandboxes + shared memory could unlock the next big discovery
How many breakthroughs came from carrying a solution out of one field into another?A lot, but let’s check some that are relevant to AI only:...
容器沙盒方案深度对比
容器沙盒方案深度对比 定位概览：以下 7 个项目都围绕"为 AI Agent / 不可信代码提供安全隔离的执行环境"这一核心需求，但技术路线、成熟度、适用场景差异极大。 ---|--------|------|---------|---------|----------| | #OpenSandbox | 阿里巴巴 | Python / Go / 多语言 SDK | 10.4k | Apache…
容器沙盒知识点补充
容器沙盒知识点补充 本文档为 2026-04-29 容器沙盒方案深度对比 的配套知识库，从底层原理出发帮助小白理解容器沙盒涉及的核心技术。 知识来源：知乎专栏、AWS 官方文档、Google gVisor 博客、Linux 内核文档、Red Hat 技术博客等。 1.1 Linux Namespaces（命名空间）— "看不见别人" [!note] 一句话理解 命名空间让进程以为自己独占整个系统…
Scaling Managed Agents: Decoupling the brain from the hands
Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.
How We Built Our Sandboxed Claude Agent without Leaking Its API Keys
Listen Labs 分享如何构建安全的沙盒化 Claude Agent，通过 Workstation 架构实现 API 密钥零暴露