BestHub
Sign in
Tagged articles

sandbox

130 articles · Page 1 of 2
AI Code to Success
AI Code to Success
Sep 21, 2026 · Artificial Intelligence

DeepSeek Harness: Three Guardrails for AI Agents — Approval, Sandbox & Permission Presets

This article details Harness's three-layer guardrail system for AI agents: approval gates that default to deny, filesystem sandboxes with enforceable isolation levels, and permission presets that bundle sandbox and approval settings into switchable profiles, plus subagent and workflow orchestration capabilities.

AI AgentsHarnessapproval
0 likes · 23 min read
DeepSeek Harness: Three Guardrails for AI Agents — Approval, Sandbox & Permission Presets
AI Architecture Path
AI Architecture Path
Sep 16, 2026 · Artificial Intelligence

Daytona: 90ms Sandboxes for Safe AI Agent Code Execution

This article analyzes Daytona, an open-source sandbox infrastructure that spins up isolated execution environments in 90ms for AI-generated code, detailing its architecture, lifecycle management, MCP integration, SDK examples, and advantages over Docker for high-frequency AI agent workflows.

AI AgentCode ExecutionDaytona
0 likes · 19 min read
Daytona: 90ms Sandboxes for Safe AI Agent Code Execution
Shuge Unlimited
Shuge Unlimited
Sep 1, 2026 · Artificial Intelligence

DeepSeek Harness: Inside the 1,600-Line Model Exoskeleton

A deep technical analysis of DeepSeek Harness (dsh), an open-source agent runtime that acts as a model exoskeleton — plugin-based architecture, 1,546-line core loop, session-log-driven design, and built-in data loop via HTTP extensions.

AI Agent RuntimeAgent FrameworkCordis
0 likes · 21 min read
DeepSeek Harness: Inside the 1,600-Line Model Exoskeleton
Tech Musings
Tech Musings
Aug 31, 2026 · Cloud Native

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

The author details removing filesystem tool plugins from DeepSeek Harness (DSH) to secure multi-tenant container deployments, covering plugin architecture, overlay-based disabling, impact on 6 tools, real-model attack testing showing bash as a residual channel mitigated by sandbox fail-closed behavior, and resource metrics showing negligible savings.

Attack SurfaceDeepSeek HarnessPlugin Architecture
0 likes · 15 min read
Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface
Linyb Geek Road
Linyb Geek Road
Aug 18, 2026 · Artificial Intelligence

How Decoupling the “Brain” and “Hands” Transforms Agent Architecture and Cuts First‑Token Latency by 60%

The article analyzes the structural flaw of tightly coupling session, harness, and sandbox in a single container, proposes separating them into three independent interfaces, and demonstrates how this redesign improves fault tolerance, security, and reduces Time‑to‑First‑Token latency by about 60% while enabling flexible, scalable agent deployments.

Agent ArchitectureHarnessLLM performance
0 likes · 11 min read
How Decoupling the “Brain” and “Hands” Transforms Agent Architecture and Cuts First‑Token Latency by 60%
Architect
Architect
Aug 12, 2026 · Artificial Intelligence

Beyond the Model: Making AI Agent Tasks Run Reliably

Even after a model and its API are working, real‑world AI agents often fail because of missing infrastructure such as tool definitions, sandbox boundaries, state persistence, memory handling, tracing, and evaluation, requiring a systematic approach to turn model outputs into controlled, repeatable actions.

AI AgentsAI infrastructureevaluation
0 likes · 20 min read
Beyond the Model: Making AI Agent Tasks Run Reliably
TechVision Expert Circle
TechVision Expert Circle
Aug 11, 2026 · Artificial Intelligence

AI Agents Out of Control: Redrawing Enterprise Security Boundaries

Recent jailbreak incidents show that AI agents equipped with tool‑calling can autonomously breach authorized limits, exposing structural flaws in permission models and prompting a four‑layer isolation architecture with intent gating, sandboxed tool calls, output guards, and runtime monitoring.

AI AgentsFirecrackerMCP
0 likes · 14 min read
AI Agents Out of Control: Redrawing Enterprise Security Boundaries
Wu Shixiong's Large Model Academy
Wu Shixiong's Large Model Academy
Jul 29, 2026 · Information Security

Why Claude Code Still Needs a Sandbox Even with Auto Mode

Claude Code’s Auto Mode reduces manual approvals but still suffers a 17% miss rate on dangerous actions, prompting the need for a sandbox that enforces OS‑level execution boundaries, complementing permission rules and human checks to provide layered security for AI agents.

AgentAuto ModeClaude Code
0 likes · 11 min read
Why Claude Code Still Needs a Sandbox Even with Auto Mode
Alibaba Cloud Native
Alibaba Cloud Native
Jul 27, 2026 · Artificial Intelligence

Why AgentScope 2.0 Is the Ideal Harness Runtime for Managed Agents

AgentScope 2.0 provides a stable, sandbox‑isolated runtime for Managed Agents by separating Brain (reasoning) and Hands (tool execution), offering multi‑tenant control, session persistence, flexible worker modes (local, cloud sandbox, self‑hosted), and a clear multi‑agent orchestration model for enterprise AI workloads.

AI RuntimeAgentScopeJava SDK
0 likes · 28 min read
Why AgentScope 2.0 Is the Ideal Harness Runtime for Managed Agents
DataFunSummit
DataFunSummit
Jul 25, 2026 · Cloud Native

Evolution of Agent Infrastructure: Engineering Insights from Tencent Cloud Agent Runtime

The article analyzes how agents transition from demo to production, revealing that beyond model capabilities, stability, elasticity, security, and governance become critical, and explains the engineering challenges and solutions—including session management, state persistence, scheduling mismatches, sandbox isolation, and open‑source strategies—that underpin Tencent Cloud's Agent Runtime.

Agent RuntimeKubernetesRL training
0 likes · 26 min read
Evolution of Agent Infrastructure: Engineering Insights from Tencent Cloud Agent Runtime
Linyb Geek Road
Linyb Geek Road
Jul 24, 2026 · Artificial Intelligence

Inside Claude Code’s Harness: How Loops, Planning, Sandboxes, and Memory Power AI Programming

The article dissects Claude Code’s harness control framework, showing how a simple execution loop, planning layer, sandboxed tools, hierarchical delegation, and persistent memory—implemented with CrewAI—enable reliable AI‑driven code fixing, while highlighting trade‑offs, overhead, and future limitations.

AI AgentsClaude CodeCrewAI
0 likes · 17 min read
Inside Claude Code’s Harness: How Loops, Planning, Sandboxes, and Memory Power AI Programming
Xiaohongshu Tech REDtech
Xiaohongshu Tech REDtech
Jul 14, 2026 · Artificial Intelligence

How Xiaohongshu Built an Enterprise AI Personal Assistant from Zero to Full‑Staff Coverage

Xiaohongshu’s AI team describes a month‑long, three‑person effort that leveraged an AI‑Native project model, isolated Kubernetes clusters, a custom sandbox (NEX), token‑saving Self‑GC, cost‑aware routing, and a three‑layer memory architecture to roll out a secure, low‑cost AI personal assistant used by every employee.

AI AgentCost OptimizationEnterprise AI
0 likes · 14 min read
How Xiaohongshu Built an Enterprise AI Personal Assistant from Zero to Full‑Staff Coverage
Old Meng AI Explorer
Old Meng AI Explorer
Jun 26, 2026 · Artificial Intelligence

Understanding Codex: Agents, Sandbox, Approval, AGENTS.md, and Memory

This article explains Codex’s core concepts—its autonomous Agent loop, sandbox permission boundaries, approval policies, the project‑specific AGENTS.md handbook, and optional Memory/Chronicle features—showing how they work together, how to configure them, and why they affect file‑renaming and other tasks.

AGENTS.mdAI AgentCLI
0 likes · 16 min read
Understanding Codex: Agents, Sandbox, Approval, AGENTS.md, and Memory
AliExpress Tech
AliExpress Tech
Jun 26, 2026 · Artificial Intelligence

From LLM-as-Judge to Agent-as-Judge: A Technical Evolution

The article analyzes why using a large language model alone as a judge is unreliable for complex AI evaluation, introduces the Agent-as-Judge architecture with sandboxed execution, Skill‑driven workflows, and a three‑layer assessment framework, and discusses its benefits, costs, and practical outcomes.

AI testingAgentLLM
0 likes · 14 min read
From LLM-as-Judge to Agent-as-Judge: A Technical Evolution
AI Architecture Path
AI Architecture Path
Jun 26, 2026 · Artificial Intelligence

How Omnigent Unified Scheduling Gained 4,000+ Stars in 5 Days for Multi‑Agent Coding

The article analyzes the fragmented workflow of using multiple AI coding agents, introduces Omnigent's meta‑harness that unifies Claude Code, Codex, Cursor and others, details its architecture, core capabilities, installation steps, security controls, known limitations, and compares it with single‑agent setups.

AI AgentsClaude CodeCodex
0 likes · 15 min read
How Omnigent Unified Scheduling Gained 4,000+ Stars in 5 Days for Multi‑Agent Coding
Programmer DD
Programmer DD
Jun 25, 2026 · Cloud Native

Why Agents Need a Full Engineering Platform Beyond the Demo

The article analyses how EdgeOne Makers provides a comprehensive engineering foundation—including managed runtime, sandbox tools, conversation storage, observability, model integration, authentication, and Git‑based deployment—to turn AI Agent demos into production‑ready services, and compares it with alternative approaches.

Agent RuntimeEdgeOne MakersGit deployment
0 likes · 16 min read
Why Agents Need a Full Engineering Platform Beyond the Demo
Programmer DD
Programmer DD
Jun 20, 2026 · Artificial Intelligence

Why Vercel Eve’s ‘One Directory per Agent’ Design Makes Building Production‑Ready AI Agents a Breeze

Vercel Eve is an open‑source framework that bundles durable workflows, sandboxed execution, human‑in‑the‑loop approvals, sub‑agents, multi‑channel adapters, tracing and evals into a filesystem‑first layout, turning a few hundred lines of demo code into a production‑grade, version‑controlled, observable AI agent system.

AI AgentsAgent FrameworkDurable Workflow
0 likes · 16 min read
Why Vercel Eve’s ‘One Directory per Agent’ Design Makes Building Production‑Ready AI Agents a Breeze
DataFunSummit
DataFunSummit
Jun 20, 2026 · Artificial Intelligence

Harness Engineering: Execution Control, Safety Boundaries, Human‑AI Collaboration, and Multi‑Agent Design

In a 90‑minute DataFunTalk live session, experts Huang Jia, Qu Xiangmou and Yao Binbin dissect ten critical challenges of moving AI agents from demo to production—covering sandbox vs permission boundaries, checkpoint design, rollback strategies, tool‑call safety, multi‑agent coordination, human‑in‑the‑loop control, observability, and memory management—to illustrate how rigorous engineering, not just model capability, enables trustworthy, controllable agents.

AI AgentsHarness EngineeringMulti-agent
0 likes · 18 min read
Harness Engineering: Execution Control, Safety Boundaries, Human‑AI Collaboration, and Multi‑Agent Design
AI Engineering
AI Engineering
Jun 17, 2026 · Artificial Intelligence

Vercel Unveils Eve: A Next.js‑Style Open‑Source Framework for AI Agents Facing Naming Clash

Vercel open‑sources Eve, an agent‑as‑directory framework that bundles production‑grade features such as persistent sessions, sandboxed execution, human‑in‑the‑loop approvals, standardized tool adapters, multi‑channel support and OpenTelemetry observability, while already powering over a hundred internal agents and sparking community debate over its naming.

AI AgentsEveOpen Source Framework
0 likes · 9 min read
Vercel Unveils Eve: A Next.js‑Style Open‑Source Framework for AI Agents Facing Naming Clash
AI Architect Hub
AI Architect Hub
Jun 16, 2026 · Operations

How to Build a Loop Engineering System: A Ready‑to‑Deploy Checklist

This article provides a step‑by‑step checklist covering six modules—from pre‑planning and requirement standardization to deployment and ongoing ops—detailing templates, core components, sandbox isolation, scheduling architecture, monitoring, and acceptance criteria for implementing Loop Engineering in both quick‑start and enterprise‑grade scenarios.

CI/CDDevOpsLoop Engineering
0 likes · 14 min read
How to Build a Loop Engineering System: A Ready‑to‑Deploy Checklist
AI Programming Lab
AI Programming Lab
Jun 11, 2026 · Artificial Intelligence

The Complete AI Agent Development Stack: A 2026 Roadmap

This article breaks down the full technology stack for production‑ready AI agents in 2026, covering model gateways, orchestration frameworks, tool‑use protocols, memory layers, state‑machine execution, sandboxing, observability, evaluation, and human‑in‑the‑loop safeguards, while highlighting concrete tools, risks, and best‑practice trade‑offs.

AI Agentmemory managementmodel gateway
0 likes · 22 min read
The Complete AI Agent Development Stack: A 2026 Roadmap
Tech Freedom Circle
Tech Freedom Circle
Jun 9, 2026 · Artificial Intelligence

Deep Dive into Harness’s Sandbox Infra: How Deep Agents Enable Secure AI Execution

This article provides a detailed technical analysis of Harness’s Sandbox infrastructure, explaining how Deep Agents’ sandbox backend isolates file operations and command execution, the role of the single execute() entry point, security guarantees, lifecycle management, and practical integration steps for Docker, Kubernetes, or commercial sandbox providers.

AIDeep AgentsHarness
0 likes · 39 min read
Deep Dive into Harness’s Sandbox Infra: How Deep Agents Enable Secure AI Execution
Alibaba Cloud Native
Alibaba Cloud Native
Jun 5, 2026 · Artificial Intelligence

Cut AI Agent Costs by 90% Using Alibaba Cloud MSE AI Task Scheduling with Sandbox

The article explains why stateful, security‑isolated AI agents suffer low resource utilization and high costs, and shows how Alibaba Cloud MSE AI task scheduling combined with Agent Sandbox’s dynamic sleep‑wake mechanism can reduce agent operating expenses by more than 90%, illustrated with a concrete five‑job scenario.

AI AgentsAlibaba CloudCost Optimization
0 likes · 7 min read
Cut AI Agent Costs by 90% Using Alibaba Cloud MSE AI Task Scheduling with Sandbox
DataFunSummit
DataFunSummit
Jun 5, 2026 · Artificial Intelligence

Harness Engineering: Making Multi‑Agent Systems Safe and Trustworthy from Demo to Production

In a 90‑minute live technical session, three experts dissect ten core challenges of Agent engineering—sandbox vs permission boundaries, checkpoints, rollback, tool‑call safety, human‑in‑the‑loop, multi‑agent coordination, observability, and memory—showing that moving agents from "usable" to "trustworthy" requires fine‑grained execution controls rather than broader permissions.

Agent EngineeringCheckpointhuman-in-the-loop
0 likes · 18 min read
Harness Engineering: Making Multi‑Agent Systems Safe and Trustworthy from Demo to Production
DataFunTalk
DataFunTalk
Jun 4, 2026 · Artificial Intelligence

Harness Engineering: Execution Control, Safety Boundaries, Multi‑Agent Design

The live discussion explores how to move agents from demo to production by establishing execution controls, safety boundaries, checkpoints, rollback mechanisms, tool‑call auditing, human‑in‑the‑loop handling, multi‑agent coordination, observability, and memory management, forming a comprehensive harness engineering framework.

Agent EngineeringCheckpointMulti-agent
0 likes · 15 min read
Harness Engineering: Execution Control, Safety Boundaries, Multi‑Agent Design
ArcThink
ArcThink
Jun 2, 2026 · Artificial Intelligence

Stop Giving AI Full Access: Workflow Guide to Agent Permission Gates

The article explains how to prevent AI agents from operating with unrestricted permissions by introducing a three‑layer gate system—Permission Gate, Scope Gate, and Verification Gate—detailing risk‑based action categories, sandboxing, approval policies, allow/ask/deny rules, project‑level configuration files, and hook implementations to make secure defaults the norm.

AI AgentsHooksMCP
0 likes · 16 min read
Stop Giving AI Full Access: Workflow Guide to Agent Permission Gates
Linyb Geek Road
Linyb Geek Road
Jun 2, 2026 · Artificial Intelligence

Harness Engineering Deep Dive: Turning AI Agents from Toys into Productive Tools

This article explains the Harness Engineering framework that equips AI agents with reliability, efficiency, security, and traceability, showing how to turn them from fragile prototypes into scalable, production‑ready tools through systematic context management, sandboxing, resource control, and data‑driven evolution.

AI AgentFunction CallingHarness Engineering
0 likes · 18 min read
Harness Engineering Deep Dive: Turning AI Agents from Toys into Productive Tools
Old Zhang's AI Learning
Old Zhang's AI Learning
May 28, 2026 · Artificial Intelligence

How Anthropic Contains Claude: Three Isolation Strategies Explained

Anthropic’s engineering blog reveals that securing powerful AI agents like Claude requires focusing on blast radius and implementing three layered defenses—model, environment, and external content—through distinct isolation approaches, hard OS sandboxes, and practical lessons from real‑world pitfalls.

AI agent securityAnthropicClaude
0 likes · 11 min read
How Anthropic Contains Claude: Three Isolation Strategies Explained
AntTech
AntTech
May 22, 2026 · Cloud Native

From Computer Use to Datacenter Use: Enabling AI Agents to Drive Data Centers Like Function Calls

The article analyzes how AI agents require datacenter‑scale compute beyond a single virtual machine, explains why existing cloud‑native stacks cannot meet this demand, and details Ant Group's AKernel and openYuanrong solution—including three technical pillars, performance benchmarks, a tiny development team, and a streamlined deployment workflow that turns any developer into a "Build Your Own Cluster" operator.

AI AgentsAKernelcloud-native
0 likes · 16 min read
From Computer Use to Datacenter Use: Enabling AI Agents to Drive Data Centers Like Function Calls
James' Growth Diary
James' Growth Diary
May 19, 2026 · Information Security

Securing AI Tool Calls with PermissionGate and BashSandbox: A Deep Dive

The article analyzes the security challenges of AI coding assistants that can read files, run shell commands, and call external APIs, and presents a layered defense architecture—PermissionGate for tool‑level gating and BashSandbox for command‑level filtering—detailing design principles, risk classifications, user‑authorization flows, and prompt‑injection detection.

AI securityAccess ControlBashSandbox
0 likes · 28 min read
Securing AI Tool Calls with PermissionGate and BashSandbox: A Deep Dive
Tech Ocean
Tech Ocean
May 5, 2026 · Artificial Intelligence

Deep Agents Day 9: Skills and HITL for Enforcing Team Rules with Human Approval

The article explains how Deep Agents’ skills and the interrupt_on (HITL) configuration let teams embed professional procedures and require human review for high‑risk tool calls, detailing the file‑based skill format, appropriate use cases, and how permissions, sandboxing, and logging complete the security stack.

AI safetyDeep AgentsHITL
0 likes · 9 min read
Deep Agents Day 9: Skills and HITL for Enforcing Team Rules with Human Approval
Tech Ocean
Tech Ocean
May 5, 2026 · Artificial Intelligence

Why AI Agents Need a Safe ‘execute’ Tool: Running Commands and Managing Risks

The article explains how the execute tool lets Deep Agents run shell commands and close the verification loop, but also outlines the security risks, backend choices, sandbox options, permission handling, human‑in‑the‑loop approval, and logging best practices required for safe deployment.

AI AgentsBackendexecute tool
0 likes · 11 min read
Why AI Agents Need a Safe ‘execute’ Tool: Running Commands and Managing Risks
PMTalk Product Manager Community
PMTalk Product Manager Community
May 2, 2026 · Artificial Intelligence

Why Codex Beats Claude Code: Not the Model, but the Trust to Hand Over Work

The article analyzes how Codex App surpasses Claude Code by offering a sandboxed environment, permission controls, task‑list UI, planning and steering modes, Git rollback, worktree isolation, cloud integration, plugins, skills and MCP, turning the AI coding assistant into a controllable engineering workbench for a broader range of users.

AI coding assistantPermission controlWorktree
0 likes · 12 min read
Why Codex Beats Claude Code: Not the Model, but the Trust to Hand Over Work
AI Explorer
AI Explorer
Apr 26, 2026 · Artificial Intelligence

A Lightweight Python Multi‑Agent Framework That Gained 25K+ Stars in 24 Hours

OpenAI’s newly open‑sourced openai‑agents‑python SDK is a lightweight, powerful Python framework for building multi‑agent AI workflows, quickly earning over 25,000 GitHub stars, supporting 100+ LLM providers, and offering sandbox agents, built‑in tracing, and human‑AI collaboration features.

AI workflowLLMMulti-agent
0 likes · 7 min read
A Lightweight Python Multi‑Agent Framework That Gained 25K+ Stars in 24 Hours
AI Tech Publishing
AI Tech Publishing
Apr 25, 2026 · Artificial Intelligence

A Comprehensive Guide to Harness Engineering for Reliable AI Agents

This article systematically breaks down Harness Engineering—a framework that organizes large models, context, tools, state, sandboxing, security, and evaluation into a reliable AI agent engineering system, showing how to move agents from demo to production.

AI AgentsContext ManagementHarness Engineering
0 likes · 21 min read
A Comprehensive Guide to Harness Engineering for Reliable AI Agents
AI Explorer
AI Explorer
Apr 23, 2026 · Artificial Intelligence

Why OpenAI’s Lightweight Multi‑Agent Python Framework Is Going Viral

The open‑source OpenAI Agents SDK provides a lightweight Python framework that enables multiple AI agents to collaborate like a team, offering features such as automatic handoff, sandboxed execution, safety guardrails, human‑in‑the‑loop control, full‑traceability, and support for over 100 LLM models, all with just a single pip install.

AI workflowLLMMulti-agent
0 likes · 5 min read
Why OpenAI’s Lightweight Multi‑Agent Python Framework Is Going Viral
Tencent Cloud Developer
Tencent Cloud Developer
Apr 22, 2026 · Artificial Intelligence

How Cube Sandbox Achieves Sub‑60ms Secure AI Agent Execution

Tencent Cloud open‑sources Cube Sandbox, a hardware‑isolated, sub‑60 ms startup sandbox for AI agents that is E2B‑compatible, dramatically reduces memory usage, supports continuous "think‑execute‑feedback" loops, and outperforms traditional Docker‑based sandboxes in speed, security, and scalability.

AI AgentsE2BPerformance
0 likes · 7 min read
How Cube Sandbox Achieves Sub‑60ms Secure AI Agent Execution
AI Cyberspace
AI Cyberspace
Apr 21, 2026 · Information Security

OpenClaw Cloud Host Security: Default Configuration Blueprint and Hardening Guide

This article presents a step‑by‑step security analysis and hardening guide for the OpenClaw cloud host, covering threat modeling, network exposure, mDNS broadcast, remote‑access options (SSH tunnel, Tailscale), sandbox isolation, tool permission layers, credential handling, prompt‑injection defenses, skills supply‑chain checks, approval workflows, logging redaction, and observability via OpenTelemetry, all illustrated with concrete configuration snippets and real‑world test commands.

ConfigurationDevOpsOpenClaw
0 likes · 55 min read
OpenClaw Cloud Host Security: Default Configuration Blueprint and Hardening Guide
AI Explorer
AI Explorer
Apr 16, 2026 · Artificial Intelligence

Is a Lightweight Multi‑Agent Workflow Framework the Next Paradigm for AI Application Development?

OpenAI’s newly open‑sourced Agents SDK for Python offers a lightweight, vendor‑neutral framework that lets developers define, orchestrate, and monitor multiple AI agents—each acting as a specialized tool or sandboxed worker—enabling rapid construction of complex, production‑grade AI collaboration workflows.

AI workflowAgents SDKMulti-agent
0 likes · 7 min read
Is a Lightweight Multi‑Agent Workflow Framework the Next Paradigm for AI Application Development?
Old Meng AI Explorer
Old Meng AI Explorer
Apr 13, 2026 · Artificial Intelligence

Master Codex: Advanced AGENTS.md, Context Compaction, and MCP Tricks

This guide walks experienced developers through Codex’s advanced capabilities—layered AGENTS.md configuration, Context Compaction to prevent memory loss, Claude‑Code hybrid workflows, sandbox and Rules security controls, the extensible MCP protocol, profile switching, pipeline integration, and session management—to transform casual use into expert mastery.

AGENTS.mdAI codingCodex
0 likes · 14 min read
Master Codex: Advanced AGENTS.md, Context Compaction, and MCP Tricks
Linux Kernel Journey
Linux Kernel Journey
Apr 9, 2026 · Information Security

Why Traditional AI Agent Sandboxes Fail and How Sandlock Provides a Lightweight Alternative

The article argues that heavy container‑ or micro‑VM‑based sandboxes mis‑solve AI agent security, because the real threat is prompt injection at the application layer, and demonstrates that a policy‑first approach using Linux Landlock, seccomp and per‑tool isolation—embodied in the open‑source Sandlock sandbox—delivers strong protection without root or heavyweight isolation.

AI AgentsLinuxPolicy
0 likes · 15 min read
Why Traditional AI Agent Sandboxes Fail and How Sandlock Provides a Lightweight Alternative
Wu Shixiong's Large Model Academy
Wu Shixiong's Large Model Academy
Mar 31, 2026 · Information Security

Securing LLM Code Interpreter: Sandbox Strategies and Real‑World Pitfalls

This article examines why RAG systems need a Code Interpreter, explains the dangers of executing LLM‑generated code with exec(), and presents three sandbox designs—restricted exec, Docker containers, and E2B cloud sandboxes—along with whitelist/blacklist rules, an eight‑step execution flow, and practical lessons learned from production deployment.

Code interpreterDockerLLM
0 likes · 26 min read
Securing LLM Code Interpreter: Sandbox Strategies and Real‑World Pitfalls
Alibaba Cloud Developer
Alibaba Cloud Developer
Mar 26, 2026 · Artificial Intelligence

How OpenClaw’s Sandbox and Memory Architecture Powers Secure AI Agents

This article provides an in‑depth technical analysis of OpenClaw’s sandbox isolation, hybrid memory search, session lifecycle, skill loading, node architecture, and configuration management, showing how each component contributes to secure, extensible, and performant AI agent operations.

AIConfigurationSession Management
0 likes · 39 min read
How OpenClaw’s Sandbox and Memory Architecture Powers Secure AI Agents
ITPUB
ITPUB
Mar 16, 2026 · Artificial Intelligence

Why OpenClaw Failed and 7 Safer Open‑Source AI Assistants to Choose

OpenClaw’s rapid rise and fall in early 2026 exposed severe security flaws, high deployment costs, and usability issues, prompting a wave of lightweight, secure, and locally‑run AI assistant alternatives that address these shortcomings with smaller codebases, sandboxed execution, and broader platform support.

AI assistantOpenClawalternatives
0 likes · 12 min read
Why OpenClaw Failed and 7 Safer Open‑Source AI Assistants to Choose
AI Step-by-Step
AI Step-by-Step
Mar 13, 2026 · Information Security

Why Installing OpenClaw on Your Main PC Is Risky and How to Isolate It Safely

The article explains why placing OpenClaw on a primary workstation exposes personal accounts, files, and browser sessions to a message‑driven system, and provides a step‑by‑step security baseline—including isolated environments, official audits, sandbox configuration, and permission hardening—to keep the tool safely contained.

Browser ControlOpenClawSecurity
0 likes · 7 min read
Why Installing OpenClaw on Your Main PC Is Risky and How to Isolate It Safely
Ubuntu
Ubuntu
Mar 12, 2026 · Artificial Intelligence

OpenClaw “Little Lobster”: Powerful AI Agent—Secure Its Permissions Before You Install

OpenClaw is a fast‑growing AI agent that can automate file handling, run commands, and generate reports, but because it lacks a sandbox it can see all files on your computer; the article explains four permission levels, compares similar tools, and recommends safe deployment methods such as virtual machines, containers, or cloud servers while warning against direct Windows installation.

AI AgentsOpenClawSecurity
0 likes · 10 min read
OpenClaw “Little Lobster”: Powerful AI Agent—Secure Its Permissions Before You Install
Java Companion
Java Companion
Mar 12, 2026 · Artificial Intelligence

AgentScope Java: Alibaba’s Enterprise‑Grade AI Agent Framework for Java

AgentScope Java 1.0, open‑sourced by Alibaba, provides a production‑ready AI agent framework built for Java ecosystems, addressing stack fragmentation, security, operations, and multi‑agent collaboration through ReAct reasoning, real‑time interruption, sandboxing, RocketMQ‑based A2A communication, and visual debugging, with detailed integration guides and comparison to LangChain4j and Spring AI.

AI AgentsAgentScope JavaEnterprise AI
0 likes · 14 min read
AgentScope Java: Alibaba’s Enterprise‑Grade AI Agent Framework for Java
PaperAgent
PaperAgent
Mar 8, 2026 · Information Security

Why IronClaw Could Be the Secure Future of OpenClaw AI Assistants

A new watchboard reveals over 258,000 publicly exposed OpenClaw instances, prompting urgent security measures, while the recently released IronClaw—built with Rust, WASM sandboxing, and multi‑layer defenses—offers a hardened alternative, detailing its orchestrator, worker, and routine engines and how they protect AI assistants from prompt‑injection attacks.

AI securityIronClawOpenClaw
0 likes · 4 min read
Why IronClaw Could Be the Secure Future of OpenClaw AI Assistants
AI Explorer
AI Explorer
Mar 6, 2026 · Artificial Intelligence

DeerFlow 2.0: Open‑Source Agent Framework for Autonomous Research and Coding

DeerFlow 2.0, an open‑source framework released by ByteDance, coordinates multiple sub‑agents, a memory system, sandbox environment, and extensible skills to automate complex AI tasks—from research to code generation—offering a five‑component architecture, quick Docker‑based setup, and a platform for developers, researchers, and efficiency enthusiasts to build advanced autonomous agents.

DeerFlowDockerautonomous AI
0 likes · 7 min read
DeerFlow 2.0: Open‑Source Agent Framework for Autonomous Research and Coding
Architect
Architect
Mar 5, 2026 · Artificial Intelligence

How to Turn a Single OpenClaw Agent into a Multi‑Agent Team: A Step‑by‑Step Guide

This article walks you through the complete process of converting a single‑agent OpenClaw deployment into a multi‑agent architecture, covering agent isolation resources, when to split, creating agents, routing rules, DM safety, sandbox options, multi‑gateway setups, remote access, hot‑reload configuration, and a pre‑deployment checklist.

ConfigurationMulti-agentOpenClaw
0 likes · 23 min read
How to Turn a Single OpenClaw Agent into a Multi‑Agent Team: A Step‑by‑Step Guide
High Availability Architecture
High Availability Architecture
Feb 27, 2026 · Artificial Intelligence

How We Scaled Millions of AI Agents with Unikraft Micro‑VMs and a Control‑Plane Sandbox

Browser Use evolved from AWS Lambda to a control‑plane‑driven architecture using Unikraft micro‑VMs, isolating each AI web agent in a sandbox that only receives three environment variables, enabling secure, scalable execution of millions of agents with zero‑trust isolation and fast start‑up times.

AI AgentsSecurityUnikraft
0 likes · 11 min read
How We Scaled Millions of AI Agents with Unikraft Micro‑VMs and a Control‑Plane Sandbox
Architect
Architect
Feb 26, 2026 · Information Security

How OpenClaw Tames Tool Side‑Effects with Three Guardrails

This article explains how OpenClaw controls the side‑effects of AI‑driven tool calls by splitting them into three guardrails—sandbox, tool policy, and elevated—plus a dynamic exec‑approval step, detailing configuration keys, practical troubleshooting tips, and a minimal baseline setup for secure deployment.

OpenClawSecurityelevated
0 likes · 15 min read
How OpenClaw Tames Tool Side‑Effects with Three Guardrails
AI Engineering
AI Engineering
Feb 11, 2026 · Artificial Intelligence

Harrison Chase Explains Two Sandbox Architectures for AI Agents

The article analyzes why AI agents need isolated sandboxes, outlines two architectural patterns—running the agent inside a sandbox or using the sandbox as an external tool—compares their advantages and challenges, and provides concrete implementation examples and community insights.

AI AgentsAPIDocker
0 likes · 11 min read
Harrison Chase Explains Two Sandbox Architectures for AI Agents
High Availability Architecture
High Availability Architecture
Feb 6, 2026 · Information Security

How to Securely Run an OpenClaw AI Agent on a Dedicated Machine

This guide details a step‑by‑step, security‑first approach for safely experimenting with OpenClaw using a dedicated host, Tailscale private network, command whitelisting, read‑only tokens, and one‑way data flow, complete with configuration commands and emergency procedures.

AI agent securityOpenClawTailscale
0 likes · 12 min read
How to Securely Run an OpenClaw AI Agent on a Dedicated Machine
AI Engineering
AI Engineering
Feb 5, 2026 · Artificial Intelligence

CuaBot v1.0: A Third Way for AI Agents to Control Your Computer

CuaBot v1.0 introduces a new open‑source approach that lets AI agents interact with a desktop via independent cursors and sandboxed windows, avoiding full‑screen screenshots and mouse hijacking while supporting multi‑agent parallelism, H.265 video, audio, clipboard sharing, and a CLI built on Xpra and Docker.

AI automationCLICuaBot
0 likes · 4 min read
CuaBot v1.0: A Third Way for AI Agents to Control Your Computer
PaperAgent
PaperAgent
Jan 30, 2026 · Artificial Intelligence

How LLM‑in‑Sandbox Turns Large Models into General‑Purpose Agents Without Extra Training

The LLM‑in‑Sandbox framework places large language models inside a virtual machine that provides external tool access, persistent storage, and code execution, yielding up to a 24.2% performance boost across six benchmark tasks without additional training, and it scales from zero‑shot to reinforcement‑learning‑enhanced agents while remaining cost‑effective.

Agentic AILLMReinforcement Learning
0 likes · 6 min read
How LLM‑in‑Sandbox Turns Large Models into General‑Purpose Agents Without Extra Training
Alibaba Cloud Native
Alibaba Cloud Native
Jan 27, 2026 · Cloud Native

How Serverless Sandboxes Power Secure AI Agents

This article explains how lightweight security sandboxes in serverless function compute provide strong process isolation, elastic resource scaling, and pay‑per‑use economics, enabling AI agents to execute untrusted code safely while supporting session lifecycle management, protocol extensions, and cost‑effective billing models.

AI AgentFunction ComputeServerless
0 likes · 12 min read
How Serverless Sandboxes Power Secure AI Agents
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 26, 2026 · Cloud Native

How Kimi Scaled AI Agents with Alibaba Cloud’s Elastic Sandbox Architecture

Kimi built a high‑performance, low‑cost AI Agent infrastructure by combining Alibaba Cloud ACK node pools and the ACS Agent Sandbox, addressing challenges of instant sandbox response, state continuity, massive concurrency, cost efficiency, security isolation, and search‑memory integration for production‑grade agents.

AI AgentCost OptimizationElastic Scaling
0 likes · 18 min read
How Kimi Scaled AI Agents with Alibaba Cloud’s Elastic Sandbox Architecture
AI Insight Log
AI Insight Log
Jan 17, 2026 · Information Security

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox

Simon Willison instructed Claude Cowork to explore its own application bundle, revealing that the AI runs inside a full Ubuntu 22.04 virtual machine on macOS via Apple’s Virtualization.framework, protected by a dual sandbox of VM isolation and Bubblewrap, with strict user and syscall restrictions.

AI securityClaudeCowork
0 likes · 6 min read
How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox
BirdNest Tech Talk
BirdNest Tech Talk
Jan 16, 2026 · Industry Insights

Why Manus Chooses E2B: Inside the Architecture of a General‑Purpose AI Agent

The article analyzes how Manus, a general‑purpose AI agent, leverages E2B's Firecracker micro‑VM sandbox and self‑hosting deployment to achieve fast startup, full OS capabilities, session persistence, multi‑tenant isolation, and future cross‑OS support, illustrated with real‑world use cases and trade‑off assessments.

AI AgentsCloud ComputingE2B
0 likes · 8 min read
Why Manus Chooses E2B: Inside the Architecture of a General‑Purpose AI Agent
Architect
Architect
Jan 13, 2026 · Artificial Intelligence

How Anthropic Secures Its New Cowork AI Agent: Deep Dive into Isolation and Human‑in‑the‑Loop Controls

Anthropic's Cowork research preview turns AI agents into digital coworkers that can read/write files, run scripts, and access the network, prompting a detailed security analysis that covers threat modeling, VM‑based hard isolation, sandboxing, least‑privilege defaults, human‑in‑the‑loop safeguards, and mitigation of prompt‑injection attacks.

Anthropichuman-in-the-loopprompt injection
0 likes · 13 min read
How Anthropic Secures Its New Cowork AI Agent: Deep Dive into Isolation and Human‑in‑the‑Loop Controls
Alibaba Middleware
Alibaba Middleware
Jan 12, 2026 · Cloud Native

Breaking Serverless Stateless Limits: How AgentRun Solves Agent Sandbox Engineering Challenges

The article analyzes the security, state‑keeping, latency, dependency, and cost challenges of running AI Agents in serverless environments and explains how AgentRun, built on Alibaba Cloud Function Compute with RunD isolation and session affinity, provides a secure, low‑cost, high‑performance sandbox solution.

AI AgentAgentRunFunction Compute
0 likes · 17 min read
Breaking Serverless Stateless Limits: How AgentRun Solves Agent Sandbox Engineering Challenges
Alibaba Middleware
Alibaba Middleware
Jan 12, 2026 · Cloud Native

Breaking Serverless Stateless Limits: How AgentRun Solves Agent Sandbox Engineering Challenges

AgentRun Sandbox leverages Alibaba Cloud Function Compute, RunD secure virtualization, session affinity, and dynamic NAS mounting to provide a high‑performance, low‑cost, stateful execution environment for AI agents, addressing security, cold‑start latency, resource isolation, and lifecycle management challenges inherent to traditional serverless platforms.

AI AgentAgentRunFunction Compute
0 likes · 18 min read
Breaking Serverless Stateless Limits: How AgentRun Solves Agent Sandbox Engineering Challenges
Amazon Cloud Developers
Amazon Cloud Developers
Dec 17, 2025 · Artificial Intelligence

Agentic AI Guide: Choosing the Right Dedicated Sandbox Environment

This article analyzes why modern AI agents need isolated sandbox environments, outlines the two main use cases—code execution and visual interaction—details technical requirements such as easy integration, lifecycle management, and strict security, compares container versus micro‑VM approaches, and provides practical guidance for selecting the best sandbox solution on AWS.

AWSAgentCoreAgentic AI
0 likes · 28 min read
Agentic AI Guide: Choosing the Right Dedicated Sandbox Environment
Alibaba Middleware
Alibaba Middleware
Dec 9, 2025 · Artificial Intelligence

AgentScope Java 1.0 Empowers Java Developers to Build Enterprise‑Grade Agentic Apps

AgentScope Java 1.0 launches with a ReAct‑based AI agent framework that adds real‑time intervention, efficient tool management, sandbox security, high‑performance native optimisations, and seamless enterprise integration, enabling Java developers to create production‑ready, multimodal agent applications.

AI AgentsAgentScopeEnterprise AI
0 likes · 13 min read
AgentScope Java 1.0 Empowers Java Developers to Build Enterprise‑Grade Agentic Apps
Go Programming World
Go Programming World
Nov 10, 2025 · Artificial Intelligence

Boost AI Agent Productivity with an All‑In‑One Sandbox Container

This article introduces AIO Sandbox, an all‑in‑one Docker container that unifies browser, shell, VSCode, and Jupyter environments, provides agent‑oriented APIs and multi‑language SDKs, and demonstrates a quick‑start workflow and a Python example converting web pages to Markdown.

AI AgentsDockerJupyter
0 likes · 8 min read
Boost AI Agent Productivity with an All‑In‑One Sandbox Container
HomeTech
HomeTech
Sep 25, 2025 · Backend Development

How a Single Input Box Enables Unlimited Backend Logic Flexibility

This article explains how a function input box, combined with parameter interpolation and a sandboxed Node.js environment, lets backend developers write arbitrary JavaScript to dynamically generate HTML components, handle complex logic, and maintain security, offering unparalleled flexibility for ever‑changing business requirements.

Backendcode-generationdynamic-configuration
0 likes · 19 min read
How a Single Input Box Enables Unlimited Backend Logic Flexibility
AutoHome Frontend
AutoHome Frontend
Sep 22, 2025 · Backend Development

How a Single Input Box Can Power Unlimited Backend Configurations

This article explains a flexible solution that lets backend administrators write JavaScript functions directly in an input box, using parameter interpolation and a sandboxed Node.js VM to dynamically generate HTML, CSS, or script tags, handling complex logic, data transformation, and conditional branching safely.

dynamic-configparameter-interpolationsandbox
0 likes · 17 min read
How a Single Input Box Can Power Unlimited Backend Configurations
Tencent Technical Engineering
Tencent Technical Engineering
Apr 11, 2025 · Information Security

Security Analysis of MCP and A2A Protocols for AI Agents

The article examines critical security flaws in Anthropic’s Model Context Protocol (MCP) and Google’s Agent‑to‑Agent (A2A) protocol—such as hidden tool‑poisoning, rug‑pull, and command‑injection attacks that can hijack AI agents and leak data—while proposing hardening measures like authentication, sandboxing, digital signatures, fine‑grained permissions, and robust OAuth‑based consent to safeguard AI‑agent communications.

A2AAI AgentMCP
0 likes · 26 min read
Security Analysis of MCP and A2A Protocols for AI Agents
Baidu Geek Talk
Baidu Geek Talk
Jan 22, 2025 · Mobile Development

iOS Sandbox Disk Management and Cleaning Strategies

The article explains iOS sandbox storage by detailing the four main directories, their backup rules, naming conventions, and retrieval APIs, then outlines how to calculate physical file size and implements both automatic quota‑based and manual user‑driven cleaning methods, including system cache removal for tmp, WKWebView, and dyld caches.

Cache CleaningObjective-C++disk management
0 likes · 22 min read
iOS Sandbox Disk Management and Cleaning Strategies
Baidu App Technology
Baidu App Technology
Dec 25, 2024 · Mobile Development

iOS Disk Management and Cleanup Strategies for App Development

The article offers a comprehensive guide to iOS disk management for app developers, explaining the sandbox’s Documents, Library (Caches and Application Support) and tmp directories, proper storage practices, APIs for directory access, disk‑size calculation, iCloud backup exclusion, and both automatic and manual cleanup strategies including system cache handling.

Mobile Developmentcache cleanupdisk management
0 likes · 22 min read
iOS Disk Management and Cleanup Strategies for App Development
AntTech
AntTech
Jul 25, 2024 · Information Security

Security Analysis of Code Execution Sandboxes in AI Applications

This report investigates the security of code‑execution sandboxes used by various AI applications, evaluates their isolation mechanisms, presents detailed test results for multiple platforms, and offers recommendations for selecting and hardening sandbox solutions in the era of large language models.

Code ExecutionDenoFirecracker
0 likes · 23 min read
Security Analysis of Code Execution Sandboxes in AI Applications
NetEase Cloud Music Tech Team
NetEase Cloud Music Tech Team
Mar 15, 2024 · Frontend Development

Inside Tango’s Sandbox: Leveraging CodeSandbox for Fast Low‑Code Development

This article explains how the open‑source Tango low‑code engine uses a CodeSandbox‑based sandbox architecture—including dependency initialization, transpilation, and cross‑origin communication—to enable real‑time source‑code execution and visual drag‑and‑drop building within a secure iframe environment.

CodeSandboxReActfrontend
0 likes · 15 min read
Inside Tango’s Sandbox: Leveraging CodeSandbox for Fast Low‑Code Development
Java Tech Enthusiast
Java Tech Enthusiast
Feb 17, 2024 · Information Security

Linux Kernel SandBox Mode (SBM) Patch Enhances Memory Safety

Huawei engineer Petr Tesarik submitted a Linux kernel patch that adds SandBox Mode (SBM), an API confining kernel code to predefined memory regions, using hardware paging and CPU privilege levels to isolate components, detect out‑of‑bounds accesses, recover from violations, terminate the sandbox and return error codes such as -EFAULT, enabling continued execution.

Linux kernelhardware isolationmemory safety
0 likes · 2 min read
Linux Kernel SandBox Mode (SBM) Patch Enhances Memory Safety
Bilibili Tech
Bilibili Tech
Feb 6, 2024 · Frontend Development

Advanced Interception Techniques in Front-End Development: API Overriding, Service Workers, and Sandbox Strategies

Advanced interception techniques—such as overriding browser APIs, using ServiceWorkers, employing MutationObservers, creating Proxy‑based sandboxes, and configuring server‑side gateways—provide a flexible middle layer for error reporting, request monitoring, micro‑frontend isolation, and remote debugging, while demanding careful adherence to security policies.

InterceptionJavaScriptProxy
0 likes · 16 min read
Advanced Interception Techniques in Front-End Development: API Overriding, Service Workers, and Sandbox Strategies
php Courses
php Courses
Nov 16, 2023 · Information Security

Security Risks of OpenAI's ChatGPT Code Interpreter Tool

OpenAI's new ChatGPT Code Interpreter, which can generate and run Python code in a sandbox, has been shown to allow malicious actors to exploit spreadsheet handling and command execution features, raising serious information‑security concerns among experts.

AIChatGPTCode interpreter
0 likes · 2 min read
Security Risks of OpenAI's ChatGPT Code Interpreter Tool
JD Retail Technology
JD Retail Technology
Oct 16, 2023 · Frontend Development

MicroApp 1.0: Faster Sandbox and Virtual Routing for Micro‑Frontend Development

MicroApp 1.0 introduces a streamlined micro‑frontend framework with a simplified integration method, a high‑performance sandbox using variable pre‑placement and async debounce, a virtual routing system that isolates sub‑app navigation, upgraded CSS isolation, Vite compatibility, and a Chrome DevTools extension for enhanced debugging.

DevToolsFrontend FrameworkVite
0 likes · 10 min read
MicroApp 1.0: Faster Sandbox and Virtual Routing for Micro‑Frontend Development
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Oct 1, 2023 · Frontend Development

A Comprehensive Guide to Building Drag‑and‑Drop Low‑Code Platforms

This article provides a systematic overview of drag‑and‑drop low‑code platforms, covering their advantages and drawbacks, core architecture (protocols, material area, canvas, property panel, top bar), implementation details with code examples, and best practices for extensibility, sandboxing, and code generation.

Component ArchitectureDrag-and-DropUI Builder
0 likes · 23 min read
A Comprehensive Guide to Building Drag‑and‑Drop Low‑Code Platforms
Weimob Technology Center
Weimob Technology Center
Jul 28, 2023 · Frontend Development

JavaScript Sandboxes for Secure Micro‑Frontend Apps: Techniques & Examples

This article explains the concept of sandbox security mechanisms, explores their use cases in iPaaS API orchestration and micro‑frontend applications, compares eval, Function, with + proxy techniques, presents JavaScript, iframe and Node vm sandbox implementations, and details practical deployments within the Kraken framework and a centralized approval service.

JavaScriptNode.jsSecurity
0 likes · 18 min read
JavaScript Sandboxes for Secure Micro‑Frontend Apps: Techniques & Examples
Alibaba Cloud Developer
Alibaba Cloud Developer
May 31, 2023 · Frontend Development

Build a Micro‑Frontend Framework from Scratch with Vue3, React15/16 and TypeScript

This article walks through creating a full‑featured micro‑frontend framework using TypeScript, covering sub‑application registration, router interception, sandbox isolation, CSS scoping, inter‑app communication, global state management, caching, and prefetching, all demonstrated with Vue3 as the host and Vue2, React15, and React16 as child apps.

PrefetchVue3global-state
0 likes · 27 min read
Build a Micro‑Frontend Framework from Scratch with Vue3, React15/16 and TypeScript
JD Retail Technology
JD Retail Technology
Feb 9, 2023 · Frontend Development

MicroApp V1.0.0‑rc Release: Core Architecture, High‑Performance Sandbox, New Configurations, and Real‑World Use Cases

The MicroApp V1.0.0‑rc release introduces a component‑based micro‑frontend solution with a custom WebComponent‑like architecture, a virtual routing system, a high‑performance sandbox that leverages caching and decoupling, extensive performance benchmarks, new configuration options, lifecycle listeners, and a practical JD marketing‑center case study.

JavaScriptfrontend developmentmicro‑frontend
0 likes · 11 min read
MicroApp V1.0.0‑rc Release: Core Architecture, High‑Performance Sandbox, New Configurations, and Real‑World Use Cases
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Nov 25, 2022 · Frontend Development

Vue Compiler Overview and Sandbox Compilation Techniques

This article explores the fundamentals of Vue's compilation process, compares Vue 2 and Vue 3 compilers, demonstrates sandbox compilation with code examples, and discusses practical considerations such as handling templates, scripts, styles, and hot‑module reloading, providing developers with insights to effectively integrate Vue compilation in browser environments.

JavaScriptVuecompiler
0 likes · 17 min read
Vue Compiler Overview and Sandbox Compilation Techniques
转转QA
转转QA
Nov 9, 2022 · Backend Development

Using JVM‑Sandbox for Exception Injection and Code Enhancement in Java Services

This article introduces JVM‑Sandbox, explains its non‑intrusive AOP capabilities, and provides a step‑by‑step tutorial on installing the sandbox, loading custom modules, performing code enhancement via instrumentation, and testing exception injection in a Java service.

Code EnhancementException InjectionJVM
0 likes · 9 min read
Using JVM‑Sandbox for Exception Injection and Code Enhancement in Java Services
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Oct 12, 2022 · Frontend Development

Implementing a Simple Micro‑Application Loader with Qiankun: Code Walkthrough and Sandbox Isolation

This tutorial demonstrates how to build a lightweight function that loads a micro‑application by fetching its HTML, converting external CSS links to inline styles, applying scoped CSS isolation, executing JavaScript within a snapshot sandbox, and discusses entry‑point handling, isolation limitations, and routing integration.

JavaScriptcss isolationfrontend development
0 likes · 13 min read
Implementing a Simple Micro‑Application Loader with Qiankun: Code Walkthrough and Sandbox Isolation
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Oct 12, 2022 · Frontend Development

Implementing a Simplified Qiankun JavaScript Sandbox: Snapshot, Singular Proxy, and Multiple Proxy Sandboxes

This article walks through building a lightweight Qiankun JS sandbox by first explaining sandbox principles, then creating a snapshot sandbox, a singular proxy sandbox that records changes via ES6 Proxy, and finally a multiple‑proxy sandbox that isolates each micro‑frontend with its own fake window, complete with test cases and setup instructions.

JavaScriptJestMicro Frontends
0 likes · 16 min read
Implementing a Simplified Qiankun JavaScript Sandbox: Snapshot, Singular Proxy, and Multiple Proxy Sandboxes
Ctrip Technology
Ctrip Technology
Sep 1, 2022 · Backend Development

Improving Supplier Integration Efficiency and System Stability in Ctrip's Direct Connection Platform

This article presents Ctrip's backend engineering practices for the Direct Connection Platform, detailing how a sandbox testing environment, automated acceptance, rate‑limiting, and circuit‑breaking mechanisms were introduced to boost supplier onboarding speed and enhance overall system stability.

API integrationCtripRate Limiting
0 likes · 14 min read
Improving Supplier Integration Efficiency and System Stability in Ctrip's Direct Connection Platform
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Jun 27, 2022 · Frontend Development

Mastering Micro‑Frontends with Qiankun: From Basics to APAAS Integration

This article explores the concept of micro‑frontends, introduces the Qiankun framework, demonstrates its rendering workflow with practical code examples, and details an APAAS‑based architecture for integrating and managing micro‑applications, covering client‑side SDK, server proxies, routing, sandboxing, CSS isolation, and third‑party SDK challenges.

Frontend ArchitectureaPaaScss isolation
0 likes · 20 min read
Mastering Micro‑Frontends with Qiankun: From Basics to APAAS Integration
NetEase Cloud Music Tech Team
NetEase Cloud Music Tech Team
May 27, 2022 · Frontend Development

How We Cut CodeSandbox Sandbox Build Time from 2 Minutes to 1 Second

This article details the background, architecture, and step‑by‑step performance optimizations—including Packager caching, request reduction, Service‑Worker caching, and Webpack‑style externals—that reduced a CodeSandbox sandbox build from around two minutes to roughly one second.

CodeSandboxFrontend BuildPerformance Optimization
0 likes · 23 min read
How We Cut CodeSandbox Sandbox Build Time from 2 Minutes to 1 Second
Taobao Frontend Technology
Taobao Frontend Technology
May 12, 2022 · Frontend Development

How WebAssembly + QuickJS Powers a Secure Web Sandbox for Next‑Gen Web Apps

An in‑depth technical overview describes how a WebAssembly‑plus‑QuickJS sandbox architecture enhances web security, improves developer experience, and delivers benchmarked performance gains for next‑generation open web applications, while maintaining compatibility with W3C standards and integrating with existing e‑commerce platforms.

QuickJSWebAssemblyfrontend development
0 likes · 6 min read
How WebAssembly + QuickJS Powers a Secure Web Sandbox for Next‑Gen Web Apps
DaTaobao Tech
DaTaobao Tech
May 10, 2022 · Information Security

Web Security Sandbox Using WebAssembly and QuickJS

This paper proposes a WebAssembly‑QuickJS sandbox that isolates JavaScript execution and uses Shadow DOM/iframe for CSS isolation, delivering W3C‑compliant, high‑performance security for web apps, achieving 355× communication gains over mini‑programs while maintaining a lightweight, extensible ecosystem for e‑commerce plugins.

Container ArchitectureOpen TechnologyQuickJS
0 likes · 5 min read
Web Security Sandbox Using WebAssembly and QuickJS