Letting an AI agent loose for solving development tasks is a productivity dream, until it decides to optimize your home directory, brick your system, or exfiltrate your private API keys. We want that YOLO mode speed, but developer laptops are treasure troves of credentials that represent massive security nightmares.

In this session, we’ll look at Docker Sandboxes: a new isolation primitive designed to let agents operate in a secure local cocoon with restricted filesystems and virtualized credentials. But host isolation is only half the battle. We’ll dive into the typical mess AI agents create, see why basic sandbox boundaries aren't enough to stop application-level data leaks, and walk through a multi-layered security workflow combining local sandboxing with tool-level governance and policy controls for running agents that you can actually trust.