YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker

תקציר מקורי באנגליתRowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more. Rowan Christmas, product manager at Docker, shows why harness-level guardrails aren't enough to protect your machine from your own agent, and how microVM sandboxes give you security by design. He demos Docker Sandboxes (sbx): one command spins up an isolated VM with its own kernel, filesystem isolation, secret placeholders, default-deny networking and a full audit trail. It works with Claude Code, Codex or anything else. He also previews agent identity, delegation chains and policy-based governance. In this talk: • How a coding agent with default permissions can surface sensitive data on your laptop • Why microVMs beat harness-level guardrails • Running an