Note you don't need a sandbox if you are not doing code execution. There are a lot of applications where inference only is sufficient e.g. web scraping websites that don't change frequently or OCR on scanned documents.

Code execution (usually TS/JS or Python) is useful most when you are dealing with truly open ended problems. It's the opposite of the use cases of most enterprise SaaS.

▲

IanCal 2 hours ago | parent [-]

You need it if your agent can access the internet and read files you don’t want public. That’s a relatively minimal case.

	▲	TeMPOraL 19 minutes ago \| parent \| next [-]
		Do you actually need it, or do you just fear you need it? What's the actual realistic threat model for median developer or median user here? By realistic, I mean that leaking your grandma's recipes or your SSN or your million dollar idea to some pastebin is neither likely nor going to meaningfully make things worse for you, or be useful for any malicious actor. Surely this is not what everyone is worried about?
	▲	debazel an hour ago \| parent \| prev [-]
		It is really easy to restrict and contain an AI agent as long as you don't give it access to a terminal. If you only give it tools to read files and access the internet, then it is much easier to just restrict the tools themselves rather than setting up a whole isolated sandbox.