How It Works

A sandbox is an isolated place in which the agent can inspect code, run commands, make changes, and produce commits. The sandbox can run locally through a container system or remotely through a hosted environment. The resulting commits can then be pulled back into the main workspace.

Containment matters because an unsandboxed agent can perform unexpected actions. Examples include deleting files outside the intended project or exposing environment variables to an unsafe destination. The sandbox narrows the execution boundary and makes it practical to grant the agent enough freedom to work without granting unrestricted access to the operator's machine.

Away-from-keyboard agents can also run inside continuous-integration workflows. A pull request can trigger an agent review action that:

1. Checks out the branch.
2. Loads a review prompt or procedure.
3. Inspects the change.
4. Runs checks such as type checking.
5. Records what the agent did.
6. Posts a review result.

Multiple agents can operate in parallel on different tasks. They may run on the local machine if resources allow or in remote sandboxes when local constraints would limit concurrency.