DiDi's HUATUO project presents a kernel observability framework for agent sandboxes using eBPF and dynamic tracing to capture system-wide metrics, exceptions, auto-tracing, continuous profiling, and hardware faults, correlating kernel events with container identities for root-cause analysis in cloud-native and AI infrastructure.
The article explains how ACK One Fleet upgrades the AI Agent Sandbox from a single‑cluster Kubernetes setup to a multi‑cluster architecture, addressing capacity limits, fault‑domain risks, and scheduling inefficiencies while providing global capacity control, water‑level balancing, fault‑tolerant failover, and faster sandbox startup through E2B and CRD integrations.
Alibaba Cloud's Knative now integrates a dedicated Agent Sandbox workload type, enabling stateful AI agents to run in a serverless Kubernetes environment with per‑user isolation, automatic scaling, instant pause/resume, and warm‑pool pre‑warming for zero‑cost idle periods.
OpenAI's Codex desktop app is now available on the Microsoft Store for Windows 10 19041+, offering multi‑agent parallelism, long‑task management, diff review, reusable skills, and PowerShell integration, while introducing the first Windows‑native sandbox that isolates agents through restricted tokens, file‑system ACLs, and a dedicated sandbox user, all fully open‑sourced in Rust.
This guide walks you through deploying the Qwen 3.5‑plus model on Alibaba Cloud ACK/ACS using the ACS Agent Sandbox, creating a CoPaw sandbox, configuring model access, integrating with DingTalk, and optionally using the sandbox’s pause‑and‑wake features.
