Docker PM Rowan Christmas Demos MicroVM Sandboxes for Coding Agents
At the AI Engineer World's Fair 2026, Docker Product Manager Rowan Christmas presented Docker Sandboxes (sbx). The tool uses microVM technology to provide kernel-level isolation, default-deny networking, and audit trails for coding agents, addressing security risks such as the potential exposure of local sensitive data like browser history and bank accounts.
ImportanceLocalEvidenceE2 unreplicatedWrite-upQuick
In a talk at the AI Engineer World's Fair 2026, Rowan Christmas, Product Manager at Docker, introduced Docker Sandboxes (sbx). This tool aims to provide an isolated runtime environment for coding agents like Claude Code and Codex using microVM technology.
According to the episode description, Christmas demonstrated that a coding agent with default permissions could surface sensitive data, such as browser history and bank account information, within just five prompts. He argued that harness-level guardrails are insufficient for protecting the host machine, whereas sbx offers 'security by design' through its own kernel, filesystem isolation, secret placeholders, default-deny network egress, and a full audit trail.
This resource is suitable for developers focused on AI agent infrastructure security. Readers can use it to understand Docker's proposed microVM-based isolation approach and governance controls (such as network allow/deny lists and MCP catalogs). Note that this recommendation is based on official publisher metadata and chapter summaries, not a complete transcript or detailed technical reasoning.