Nobody can define what a sandbox is because the goalpost keeps moving. The evolution of what agents need from a sandbox: Stage 1 (code execution) Your agent needs to run Python, analyze a CSV, and solve a math equation that ChatGPT can't do natively. So you spin up a tiny isolate Stage 2 (coding agents) Now the agent needs to clone a GitHub repo, edit code, install packages, run it, and preview the output. You need a full Linux machine Stage 3 (agent lives inside the sandbox) Now security matters. Can the agent see your tokens and credentials? What can it access on the internet? Do you need a firewall? Stage 4 (RL workloads) Now you want speed, throughput, concurrency, and spin up anywhere between 50,000 and 500,000 sandboxes simultaneously in seconds Stage 5 (general-purpose knowledge work) Legacy apps, internal tooling, workflows - everything lives in Windows. Linux sandboxes won't cut it here The tools that serve Stage 1 don't fit into Stage 3. The ones that fit into Stage 3 don't work well in Stage 4. And so on. What your agent needed a sandbox for 18 months ago is completely different from what it needs today. And what it'll need in 6 months doesn't exist yet.