Why it matters

Sandbox shapes safety. Understanding shapes design.

Advertisement

The architecture

Container per tool call.

gVisor / Firecracker for kernel isolation.

Language sandboxes (Java SecurityManager legacy).

Tool sandbox layersContainerper invocationgVisor / Firecrackerkernel isolationResource limitsCPU + mem + networkCombine hardware + OS + language sandboxes; gVisor + Firecracker strong for code exec
Tool sandbox.
Advertisement

How it works end to end

gVisor userspace kernel.

Firecracker microVMs.

Resource limits (cgroups).

Network isolation.