Running Agent-Generated Code: What a Container Does and Does Not Isolate

Agents that write and run code need a sandbox, and a default Docker configuration is not sufficient for every threat model. What containers share with the host, when to reach for gVisor or a microVM, and a hardened docker run you can use today.