Sandbox

An isolated environment where AI-generated code and commands can run without touching the rest of the system.

Agents path · 5 of 6

What it is

When an agent writes and runs code, it should do so in a sandbox: an environment with limited access to files, network and system functions. If something goes wrong, the damage stays inside.

Example

An agent runs a data-analysis script in a sandbox with no network access and hands back only the resulting chart.

What can go wrong

Without isolation, a bad command — or an injected one — can delete files, leak data or reach other systems.

How to secure it

Run generated code isolated by default, block network access unless it is needed, and make changes reversible.

In Obsigen

Obsigen Runtime asks for consent to run commands in a native system dialog, and one command undoes the file changes of a whole task. About Obsigen AI

Related service: Obsigen AI