Docker

"Docker's new sandboxes aim to contain AI agents for real?"

The Register’s headline gets straight to it: an agent trying to escape, what happened when it ran inside a Docker Sandbox instead, and what it means that containment is now extending to the cloud.

Read below →

Every agent has its own set of rails. If one updates, your security posture can change without your review.

You need a layer below all of them. Join Docker's John Craft & @srinisekaran on Oct 12 for a 30-min live webinar and demo on going below the harness.

bit.ly/4hqkyjj

When teams run agents across multiple models and harnesses, relying on each one's own safety standards isn't a strategy.

You need a governed runtime underneath all of them.

Watch @tusharjain's Mainstage talk at @WeAreDevs for the full take. Now on-demand: bit.ly/4e1iIDb

The industry is continuing to pick up on the Cloud Sandboxes and Kits spec announcements and what they mean for the ecosystem.

Techzine covered both, including why the CNCF commitment is getting attention.

Read it here: bit.ly/3UeAagO

Your newest hire is shipping code at a pace your review teams can't keep up with.

Learn how secure by default is your only way forward.

Read more → bit.ly/4AQerMH

Writing code used to be the expensive part. Now it's the tokens.

Per Krogslund with Scott Gale, CTO of Fluency, on when to let agents run and when to set up a deterministic process instead.

Latest Ship Happens, full episode: youtu.be/_M2SrhUqRYs

How do you control agent behavior today?

Sandbox Kits are how you stop having the same "what did you install to get this working?" conversation.

@ReynaldAdolphe on how one file defines your tools, config, and network rules, and travels with your project.

Watch here: bit.ly/3UI6Xee

60% of orgs run AI agents in production. 40% say security is the biggest thing holding them back from scaling.

That gap is the real story right now.

@srinisekaran and Eric Jia on what agents actually are, how they work, and why the environment matters as much as the model: bit.ly/4hsSFXU

Sandboxes. So hot right now.

Turns out people really want to close their laptops while their agents keep working (safely!). Who knew.

If you want the full context, the blog is linked in the comments.

New signups get $250 in Cloud Sandboxes credit to try it yourself: bit.ly/4jBJQw4

Your laptop is the new prod. Govern it that way.

Join Docker's @ealeyner & @srinisekaran on Oct 5 at 9am PST for a live 30-min webinar and demo on governing agents across network, filesystem, and MCP.

Register today: bit.ly/4hqkyjj

If you've been following the Docker Sandboxes conversation and want to go deeper, start with @LowLevelTweets's latest.

Why the microVM boundary is the right tool for agents running unattended with real credentials, & what it looks like when an agent tries to reach something it shouldn't: youtube.com/watch?v=9-2CSJ…

If you were at @WeAreDevs last week, this is your recap. If you weren't, this is what you missed.

Two major announcements, a surprise keynote guest, and resources to go from reading about it to actually trying it.

Full recap here: bit.ly/4z2KLu2

The @AgenticAIFdn (part of the @linuxfoundation) just published their take on the Docker Sandbox Kit Specification - now part of their ecosystem.

What an agent can do, where it can reach, what it can touch: declared in one OCI image, open standard, vendor neutral.

Read the full article: bit.ly/4AJoRO3

“Don't trust a model to govern a model."

Mark Cavage's keynote at @WeAreDevs covered:
- New Cloud Sandbox offering
- Sandbox Kit Spec, a common foundation for the agent ecosystem
- Surprise guest Hervé Bizira from @NousResearch

Trust comes from the system around the agent.

Watch: youtube.com/live/G1tT3pwbs…

WeAreDevelopers doesn't stop when the conference does.

@band_hq is hosting a virtual hackathon with @WeAreDevs, co-partnered by Docker, running through October 5.

Open to everyone. Build something real. Full details here: bit.ly/4z9iAKb

The Dark Factory hackathon is still running until October 5th! It's virtual, so you can join from anywhere.

See below for more information and get signed up!

If someone else on your team needed to recreate your agent setup today, could they?

Data centers in space sounds inevitable until you talk to someone who actually has to think about the physics.

On Ship Happens: Justin Kuiper of Future Tech with Per Krogslund on the gap between the hype and what AI infrastructure in space actually requires:

Full episode: bit.ly/46DTzdJ

WeAreDevelopers is a wrap and we're still buzzing from it!

Thank you for the thoughtful conversations, and the energy you brought to each session, and to the Sandbox Royale arena.

You are the reason we do this.

We hope you (and all your swag) have safe travels back home.

Share your favorite @WeAreDevs moments and pics below: