- Ama-sandbox okusebenza achaza imingcele eqinile yamafayela, izinqubo, inethiwekhi kanye nezimfihlo ukuze ama-ejenti okubhala ikhodi akwazi ukuqhuba imisebenzi enamandla ngaphandle kokufaka engozini ababungazi noma izinhlelo zokukhiqiza.
- Amapulatifomu esimanje ahlanganisa izinto zokuqala ze-OS (i-Seatbelt, i-Landlock, i-gVisor, ama-microVM) nezifinyezo ezisezingeni eliphezulu njengezithombe, amachibi afudumele, amavolumu nama-PTY ukugcina ama-sandbox ephephile futhi esheshayo.
- Izimfihlo, inqubomgomo yenethiwekhi, ukwethembana kwendawo yokusebenza kanye nokuzivikela kokufakwa ngokushesha kwakha uhlelo lokulawula lwangempela; ukuhlukaniswa komsingathi kukodwa akwanele ukuze kufezwe umsebenzi ophephile.
- Amafu kanye nezindawo zemvelo zasendaweni (i-Cloudflare, i-GKE, i-Heroku, i-Docker, i-Freestyle, i-E2B, i-Daytona, i-Cursor, i-LangChain) ziyahlangana ngezikhathi zokusebenza ze-sandboxed njengendlela ezenzakalelayo yokusebenzisa ikhodi ekhiqizwe yi-ejenti engathembekile.
Ukuvumela ama-ejenti e-AI ukuthi asebenzise ikhodi, athinte amafayela, avule iziphequluli futhi ashaye ama-API aguqula kusuka ekuqedeleni okuzenzakalelayo okumangalisayo abe yinto esondele kakhulu kunjiniyela omncane onezimpande emshinini. Lawo mandla engeziwe yiwona kanye abenza bazizwe beyimilingo - futhi yingakho nje bengaba yingozi. I-ejenti engaqondile noma engalungile ingasula isizindalwazi, ivuze ukhiye we-API kwi-inthanethi, noma ifake isakhiwo esiphukile ekukhiqizeni ngaphandle "kokuqonda" ngempela ukuthi yini ehambe kabi.
Umbuzo wangempela awusekho “indlela enembile ngayo le modeli?” kodwa “yini engafinyelela kuyo uma ingalungile, ikhohlisiwe noma iqiniseka ngokweqile?”. Ama-sandbox okusebenza kwama-ejenti ayimpendulo yobunjiniyela: izindawo ezibanzi lapho ama-ejenti engafunda futhi abhale ikhodi, asebenzise ama-shells, aqalise amaseva noma ajikeleze iziphequluli, kuyilapho ulawula ngokuqinile izinhlelo zamafayela, inethiwekhi, iziqinisekiso kanye nomjikelezo wokuphila. Esikhundleni sokuthemba imodeli, uvimba i-blast radius.
Kungani ama-ejenti okubhala amakhodi edinga i-sandbox ezinikele yokwenza
Ama-ejenti okubhala amakhodi esimanje afana neClaude Code, LangChain Deep Agents, ama-sandbox e-Docker okubhala amakhodi kanye namathuluzi afanayo awasasebenzi njengama-chatbot alula anokufinyelela amafayela. Bafunda yonke indawo yokugcina amafayela, bahlele amafayela, basebenzise imiyalo yegobolondo, balawule i-Git, baqale ukwakha ama-Docker, bakhulume nama-API angaphandle futhi basebenzise ngisho nezimo ezifana nedeskithophu ngesiphequluli. Amadokhumenti abathengisi acacile ngalokhu: I-Claude Code inikezwa njengomsizi wokuthuthukiswa kwe-agile ongahlola i-codebase yakho, enze ukuhlela futhi asebenzise imiyalo; Ama-LangChain Deep Agents aphatha i-sandbox backend njengendawo lapho enza khona imiyalo yegobolondo, aphathe izinhlelo zamafayela futhi anikeze umsebenzi kuma-sub-agent ukuze ahlukaniswe.
Leli qoqo lamakhono yilona kanye elenza la ma-ejenti abe wusizo - futhi abe yingozi ekusebenzeni. Uma imodeli isikwazi ukusebenza pytest, faka amaphakheji e-npm, vula amagatsha noma ukwehluleka kokwakha amaphutha, kumane nje kukude nezingcingo zamathuluzi ezimbalwa ekushintsheni izikripthi zokuthunyelwa, ukusunduza izithombe eziphukile, ukulungisa izilungiselelo ze-CI noma ukukhipha amathokheni ngezicelo ze-HTTP. Isiqondiso sokuphepha se-ejenti ye-OpenAI kanye nomsebenzi we-NIST wokuntshontsha i-ejenti kokubili kugcizelela ukufakwa okusheshayo: imiyalelo enonya efihliwe kumafayela, amakhasi ewebhu noma amalogi ingaqondisa i-ejenti buthule ezenzweni obungazihlosile ukuzigunyaza.
Amaqembu amaningi aqala ngokugeleza okungaqondakali kokuthi “cela-ukuvunyelwa” kuyo yonke imiyalo, bese ethola ngokushesha ukuthi awakhuli. I-Anthropic ikwabelane esidlangalaleni ukuthi abasebenzisi bavumile u-93% wezicelo zemvume zikaClaude Code; i-sandbox kaDocker ethi Claude ize yethula ne-Claude Code nge --skip-permissions ngokuzenzakalelayo, bethembele ekuhlukanisweni kwesikhathi sokusebenza esikhundleni se-airlines eziningi. Abantu bathola ukukhathala kokuvunyelwa, ikakhulukazi lapho besebenzisa ama-ejenti amaningi ngesikhathi esifanayo kanye nokushintsha komongo ezindleleni eziningi. Ngaleso sikhathi, izingxoxo zokuqinisekisa ziba umkhosi, hhayi ukulawula okuthembekile.
Ibhokisi lesanti lokwenza lishintsha imodeli yokuphepha kusuka kokuthi “themba umsebenzisi ukuthi afunde yonke imilayezo” kuya kokuthi “cabanga ukuthi eminye imiyalo izoba nephutha noma iphikisana, futhi inciphise umonakalo engayenza”. Ibhokisi lesanti liba umngcele onzima ozungeze ukuthi yimaphi amafayela, izinqubo, amanethiwekhi kanye nezimfihlo i-ejenti engazithinta, noma ngabe ilawulwa ngokujova ngokushesha noma ukwenza amaphutha nje.
Kukhona futhi impikiswano eyisisekelo mayelana nolwazi lonjiniyela: ama-ejenti adinga isikhala esanele sokusebenza ngempela. Uma usebenzisa i-sandbox eningi kakhulu enemikhawulo engacacile, imiyalo elula efana nokwakha noma ukuhlolwa ihlala yehluleka emaphutheni emvume angacacile. Izinhlelo ezinhle kakhulu, njengalezo ezisetshenziswa yi-Cursor ku-macOS/Linux/Windows noma yi-Cloudflare, i-Heroku kanye ne-Google Cloud yemithwalo yemisebenzi ephethwe, zihlose ukunikeza ama-ejenti umuzwa "wekhompyutha yangempela" ngaphakathi komngcele oqinile.
Yeka ukuthi ibhokisi lesanti lokufeza lama-ejenti lihlukanisa kanjani ngempela
I-sandbox ye-ejenti efanele akuyona nje "indawo ethile yokusebenzisa ikhodi" - iyinqwaba yemingcele ecacile echaza i-radius yokuqhuma. Ungacabanga ngemikhawulo emihlanu eyinhloko ebonakala kaninginingi kumapulatifomu ahamba phambili njenge-Docker Sandboxes, i-Cloudflare Sandboxes, i-GKE Agent Sandbox, i-Freestyle VMs, i-E2B noma i-Daytona.
Okokuqala, umngcele wesistimu yamafayela: i-ejenti kufanele ibone kuphela indawo yokusebenza owabelana ngayo ngamabomu. Amadokhumenti kaLangChain abeka ibhokisi lesanti njengesithiyo esigcina ama-ejenti kude namafayela e-host; imodeli yebhokisi lesanti likaDocker icacile ukuthi i-microVM ibona kuphela isiqondisi sephrojekthi esifakwe ngokucacile. Noma yini engaphandle kwalowo muthi ayibonakali noma ayifundwa kuphela, ngakho-ke i-ejenti ayikwazi ukufunda ngokunganaki ~/.ssh noma ubhale kabusha izilungiselelo zesistimu.
Okwesibili, inqubo kanye nomngcele we-kernel: imithwalo yemisebenzi ye-ejenti akufanele yabelane nge-kernel engahluziwe noma ithebula lenqubo. Ukwakhiwa kwe-sandbox kaDocker kuhlukanisa indawo ngayinye ngokwayo i-microVM ne-Linux kernel. I-Firecracker (esetshenziswa ngaphansi kwe-hood ngabahlinzeki abaningana) iphatha lowo mngcele we-VM njengesendlalelo sokuqala sokuhlukaniswa, bese ingeza i-seccomp, izikhala zamagama, ama-cgroup kanye nemikhawulo efana nejele phezulu. I-GKE Agent Sandbox ye-Google ifinyelela umphumela ofanayo ngaphakathi kwe-Kubernetes isebenzisa i-gVisor: isendlalelo "sentry" sibamba izingcingo zesistimu futhi sixhumanise ukufinyelela ku-node engaphansi.
Okwesithathu, umngcele wenethiwekhi: ngaphandle kwenqubomgomo yenethiwekhi, i-ejenti ene-sandbox isengumshini wokukhipha idatha. Amapulatifomu amaningi angathi sína manje athunyelwa ngokuzenzakalelayo ngokuthi “ukuphika konke”. Ama-Docker Sandboxes, isibonelo, avimba i-HTTP/HTTPS kuze kube yilapho evunyelwe ngokusobala, anqume i-raw TCP/UDP/ICMP, futhi awavumeli ithrafikhi eya kumazinga e-IP ayimfihlo kanye ne-localhost ngaphandle kokuthi ulungiselele okuhlukile. I-Cloudflare, i-Google nabanye baklama ama-sandbox abo ukuze izingcingo eziphumayo zidlule kuma-proxies angahlelwa lapho ungafaka khona i-auth, ukuhlunga izindawo kanye nokusetshenziswa kwe-audit.
Okwesine, umngcele wokuqinisekisa: ukudalulwa kwezimfihlo ezingavuthiwe ngaphakathi kwebhokisi lesihlabathi kufanele kuthathwe njengesixazululo sokugcina, hhayi isenzo esizenzakalelayo. Umklamo we-Docker uqondisa izingcingo ze-HTTP nge-proxy eseceleni kwe-host engakwazi ukunamathisela amathokheni noma okhiye be-API ezicelweni ngaphandle kokufaka lawo manani angavuthiwe ngaphakathi kwe-VM. Ama-Cloudflare Sandboxes afaka iziqinisekiso ngokufanayo kungqimba lwenethiwekhi, hhayi ngama-env vars. Ngaleyo ndlela, noma ngabe i-prompt injection ikholisa i-ejenti ukuthi "iphrinte zonke iziguquguquko zemvelo", akukho lutho olumnandi lokuluntshontsha.
Okwesihlanu, umngcele womjikelezo wokuphila: izindawo zokusebenza zama-ejenti azivamile ukuhlala ngomyalo owodwa; zidinga izincazelo ezicacile zokuqala, ukumisa isikhashana, ukuthwebula izithombe, ifoloko kanye nokudiliza. I-E2B iveza izinhlelo zamafayela ezihlukanisiwe, imiyalo yangemuva kanye namavolumu angaphila ngale kwesikhathi esisodwa sokuphila kwe-sandbox. I-Freestyle igxile ekujikelezeni kwe-VM okusheshayo, ukumisa okwesikhashana kanye nokuqalisa kabusha ngokuthwebula izithombe kanye nokuhlanganisa isimo sememori. I-Daytona ingeza ama-sandbox asekelwe ku-snapshot kanye nezinqubomgomo zokumisa ngokuzenzakalela, ukulondoloza ngokuzenzakalela kanye nokususa ngokuzenzakalela ukuze ukwazi ukugcina ezinye izindawo ziphila isikhathi eside futhi uphathe ezinye njengezilahlwayo.
Uma usubona lezi zici ezinhlanu – uhlelo lwamafayela, inqubo, inethiwekhi, iziqinisekiso kanye nomjikelezo wokuphila – ungafunda noma yiliphi ikhasi lomkhiqizo we-sandbox njengochungechunge lwezinzuzo. Isitsha se-kernel esabiwe esinendawo enkulu yokukhweza kodwa imithetho eqinile yokuphuma ihluke kakhulu kwi-microVM engenazo izikhweza ze-host kodwa inethiwekhi evumela kakhulu. Kuma-ejenti okubhala ikhodi adinga ukufaka ukuncika, ukusebenzisa iziphequluli noma ukwakha izithombe ze-docker, imingcele eqinile yesitayela se-VM ivame ukuba okuzenzakalelayo okuphephile.
I-Sandboxing ku-macOS, Linux kanye ne-Windows yama-ejenti okubhala ikhodi endawo
Kuma-laptop onjiniyela, awukwazi njalo ukujikeleza ama-sandbox e-microVM anzima, ngakho-ke amaqembu kuye kwadingeka abe nobuciko ngokuhlukaniswa kwe-OS. Umsebenzi wakamuva we-Cursor kuma-sandbox endawo uyisibonelo esihle sokulungisa ngokwemininingwane ye-macOS, i-Linux ne-Windows ngenkathi kugcinwa i-API ehlanganisiwe yesendlalelo se-ejenti.
Ku-macOS, izinketho eziningana zahlolwa: I-App Sandbox, izitsha ezijwayelekile, ama-VM agcwele kanye nobuchwepheshe obuhlala isikhathi eside kodwa "obungasasebenzi" obubizwa nge-Seatbelt. I-App Sandbox ibizodinga ukusayinwa kwe-binary ngayinye i-ejenti engayisebenzisa, okwandisa kakhulu ubunzima futhi kunikeze nokuthembana okuguqukayo kwe-binary okukhiqizwe. Iziqukathi ze-Linux bezizophoqa abasebenzisi be-macOS ukuthi bangene ku-binary ze-Linux kuphela, futhi ama-VM agcwele ayene-latency yokuqalisa engamukeleki kanye ne-memory overhead yokugeleza kokubhala ikhodi okusebenzisanayo.
Ibhande lesihlalo, elifinyelelwa nge sandbox-exec, kwagcina sekuyindlela ewusizo naphezu kokuguga kwayo. Ikuvumela ukuthi usebenzise umyalo ngaphansi kwephrofayili ye-sandbox evimbela isihlahla senqubo yonke ngolimi lwenqubomgomo olunezinhlayiya ezincane: ungagunyaza noma uvimbele ama-syscall athile futhi ukhawulele izimvume zokufunda/zokubhala kumafayela noma iziqondisi eziqondiwe. I-Cursor ikhiqiza lezi zinqubomgomo ngokuguquguqukayo ngesikhathi sokusebenza ngokusekelwe kuzilungiselelo zendawo yokusebenza kanye nokuphatha kanye nezomsebenzisi. .cursorignore, ngakho-ke izindlela ezinganakwa ziba yimingcele ngaphakathi kwebhokisi lesihlabathi.
Ku-Linux, i-kernel iveza ama-primitive afanele - i-seccomp yokuhlunga i-syscall kanye ne-Landlock yemikhawulo yesistimu yamafayela - kodwa ishiya ukwakheka endaweni yomsebenzisi. Esikhundleni sokuncika kuma-OSS wrappers akhona angasekeli ukunganakwa kwe-repo-specific njengokuthi .cursorignore, I-Cursor ikhethe ukuhlela i-Landlock kanye ne-seccomp ngqo. I-Seccomp ivimbela izingcingo zesistimu eziyingozi; I-Landlock iphoqelela imithetho yokufunda/yokubhala esekelwe endleleni, ize izivumele ukuthi zimboze izindawo zokusebenza zomsebenzisi ukuze amafayela anganakwa angafinyeleleki ngokuphelele noma athathelwe indawo amakhophi avikelwe kangangokuthi izinqubo ze-sandbox azikwazi ukuwafunda noma ukuwaguqula.
Enye into ecashile ku-Linux ukusebenza: ukufaka kabusha noma ukubhala kabusha wonke amafayela anganakwa yingxenye ehamba kancane yokusetha i-sandbox. Ukuhlunga okuhlehlisiwe kwesitayela se-macOS okungabona indlela eqondile yefayela ngesikhathi se-syscall kuzokwenza kube lula lokhu, kodwa i-seccomp-bpf ye-Linux ayenzi lokho kuhlolwa kwendlela kube lula, ngakho-ke kukhona ukuhweba kwangempela kobunjiniyela phakathi kokuhlukaniswa okuqinile kanye nesivinini sokuqalisa.
Ku-Windows, ukwakha i-sandbox yomdabu elingana ngempela kuhlala kunzima ngoba iningi lama-primitives okuzihlukanisa lenzelwe iziphequluli hhayi amathuluzi okuthuthukisa ajwayelekile. I-Cursor okwamanje isebenzisa i-sandbox ye-Linux ngaphakathi kwe-WSL2 yabasebenzisi be-Windows, empeleni isekela i-Linux isolation kuze kube yilapho kutholakala ama-primitive acebile. Basebenzisana ne-Microsoft ukuze baveze amakhono afanele ukuze, ngokuhamba kwesikhathi, ama-ejenti e-Windows akwazi ukujabulela i-sandboxing yeklasi eliphezulu, yomdabu ngaphandle kwe-WSL njengendlela yokusiza.
Intambo evamile kulezi zindlela ezithile ze-OS yi-sandbox API ehlanganisiwe phezulu. Ngokombono we-ejenti kukhona "ithuluzi legobolondo" nje elinamakhono nemithetho ecacile. Ngaphansi kwe-hood, i-Seatbelt, i-Landlock/seccomp noma i-WSL2-based isolation iphoqelela leyo mithetho ngendlela ehlukile ngeplatifomu ngayinye.
Amanxusa okufundisa ukuqonda nokuhlonipha ibhokisi lesihlabathi
Ibhokisi lesanti lisiza kuphela uma umenzeli ekwazi ukubikezela ukuthi yini ezosebenza ngaphakathi kwalo nokuthi lidinga nini ukwandisa amalungelo noma ukuphuma ebhokisini. Lokho kuzwakala kusobala, kodwa empeleni kwakudinga ukushesha okujulile ngokumangazayo kanye nokuhlelwa kabusha kwamathuluzi kubathengisi abathumela amakhodi.
Isinyathelo sokuqala amaqembu amaningi asithatha kwaba ukuthuthukisa izincazelo zamathuluzi, ikakhulukazi ekusebenzeni kwegobolondo. Esikhundleni sethuluzi elijwayelekile elithi “run_shell_command”, incazelo ichaza ngokucacile ukuthi yiziphi izinsiza ezifinyelelekayo: ukuthi ngabe umyalo unokufinyelela kwesistimu yamafayela, ukufinyelela kwe-Git, ukufinyelela kwenethiwekhi, noma indawo engaxhunyiwe ku-inthanethi ngokuphelele kuye ngokucushwa komsebenzisi. Iphinde ibhale phansi ukuthi umenzeli angacela kanjani amalungelo aphezulu (isibonelo, ukufinyelela i-inthanethi yomphakathi) uma kudingeka. Lo msebenzi wobunjiniyela osheshayo uvame ukuba nombono ongokoqobo kakhulu: amaqembu asebenzisa ukugeleza kokuthunyelwa okuvamile, aqaphele lapho imodeli ibikezela khona kabi amakhono, alungise izincazelo zamathuluzi bese ephinda.
Ama-benchmark angaphakathi njenge-“Cursor Bench” noma ama-eval suite afanayo abe esesetshenziswa ukuqhathanisa ukusebenza kwe-ejenti nge-sandboxing nangaphandle kwayo. Imodi eyodwa yokuhluleka kwasekuqaleni yayingaguquguquki kakhulu: i-ejenti yayizama ngokuphindaphindiwe umyalo ofanayo we-terminal ohlulekayo esikhundleni sokuqaphela ukuthi ishaya umkhawulo we-sandbox. Ngaphandle kwesibonakaliso esicacile sokuthi kungani umyalo wehlulekile, imodeli ayikwazanga ukufunda iphethini.
Ukulungiswa kwakuwukuveza amaphutha e-sandbox ngokucacile emiphumeleni yamathuluzi, ngokuvamile ngokushukunyiswa ngalokho okufanele kwenziwe ngokulandelayo. Lapho umyalo uvinjiwe ngenxa yesistimu yamafayela noma umthetho wenethiwekhi, ithuluzi legobolondo laqala ukufaka incazelo emfushane efana nokuthi “kuvinjelwe yi-sandbox: ukufinyelela kwenethiwekhi okuphumayo kukhutshaziwe kulesi sikhathi” futhi, kwezinye izimo, icebiso lokuthi i-ejenti ingacela izimvume eziphakeme. Ngemva kwalolu shintsho, ama-ejenti aba namandla kakhulu: ayeka ukulandela imiyalo engenathemba futhi alungisa uhlelo lwawo noma acele ikhono elidingekayo.
Ukuhlolwa okungaxhunyiwe ku-inthanethi kuyasiza, kodwa kumane nje kuxoxa ingxenye yendaba. Ukuze bazi ngempela ukuthi i-sandboxing iyawunciphisa yini umuzwa womsebenzisi, amaqembu aqalise ukwesekwa kwe-sandbox kancane kancane ekukhiqizeni futhi abukele amazinga amaphutha, izikhathi zokuqedela kanye neziteshi zempendulo. Empeleni, abathengisi babika ukuthi ingxenye enkulu yemibuzo kumapulatifomu ahambisanayo manje isebenza ngokugcwele ngaphakathi kwama-sandbox - namakhasimende ebhizinisi afana ne-NVIDIA phakathi kwabasebenzisa kuqala - nokuthi ama-ejenti e-sandboxed empeleni ayama ukuze avunyelwe cishe ngo-40% kancane emisebenzini yangempela, okusindisa amahora okubuyekezwa ngesandla ngenkathi kunciphisa ubungozi.
Uma sibheka phambili, kunesithakazelo esikhulu “kuma-sandbox agents endabuko” – amamodeli aqeqeshwe ngqo emikhawulweni yendawo yawo. Esikhundleni sokuphatha igobolondo, isiphequluli noma uhlelo lwamafayela njengamathuluzi angabonakali, la ma-ejenti angaqonda ukuthi aphila esikhathini sokusebenza esilinganiselwe, angabhala izikripthi nezinhlelo ezihlala isikhathi eside, futhi kumele ahloniphe izimo zemingcele njengokuthi “akukho nethiwekhi ephumayo” noma “indawo yokusebenza efundwayo kuphela”. Lokho kuqeqeshwa kungabenza babe ngcono kakhulu ekuhleleni ukulandelana kwezenzo okuphephile nokuphumelelayo ngaphandle kokushayisana nezindonga ezingabonakali.
Amabhokisi e-sandbox amafu: i-Cloudflare, i-Google Cloud, i-Heroku nabanye
Ngaphandle kwe-laptop yonjiniyela, iqembu elikhulu labanikezeli bengqalasizinda ligijimela ukunikeza ama-sandbox alungiselelwe ngqo ama-ejenti e-AI. Imigomo yabo iyafana – ukuhlukaniswa, ukulawula kanye nokusebenza – kodwa ukuhwebelana kubukeka kuhlukile kancane esikalini samafu.
Ama-Cloudflare Sandboxes, akhiwe phezu kwama-Cloudflare Containers futhi manje atholakala kabanzi, ahlose ukubukeka nokuzizwa njengezindawo ezithuthukisiwe eziphelele zama-ejenti. Ibhokisi ngalinye lesanti liyindawo yokusebenza eqhubekayo, ehlukanisiwe oyibiza ngegama. Uma ilele, iyajikeleza uma kudingeka; uma ingasebenzi, iyama ngokuzenzakalelayo ukuze ilondoloze ukubala bese iqhubeka nesicelo esilandelayo. Abathuthukisi (noma ama-ejenti) bangasebenzisana nayo ngezindlela ezithayishiwe ezifana exec, gitCheckout, writeFile, nokuningi, kusetshenziswa i-JavaScript/TypeScript SDK.
Enye yezinkinga zamafu eziyinkimbinkimbi kakhulu ukuqinisekiswa okuphephile kusuka kuma-sandbox e-ejenti angaphakathi. Ama-ejenti avame ukudinga ukushaya izinsizakalo ezizimele, kodwa awufuni iziqinisekiso ezingavuthiwe ezitholakala eziguquguqukweni zemvelo. I-Cloudflare ifaka iziqinisekiso kungqimba lommeleli wenethiwekhi, ifaka izicelo eziphumayo nge-host ku-logic yangokwezifiso enamathisela amathokheni avela kwisitoreji esiphephile. Inqubo ye-sandbox ayikaze ibone izimfihlo zangempela, kodwa ucingo lusaqinisekiswa. Lo mklamo usekela ukufakwa kweziqinisekiso okunamandla, okuqaphela ubunikazi futhi udlala kahle ngezibopho ze-Workers.
Kuma-workflows anzima kakhulu, i-Cloudflare yengeze ulwazi oluphelele lwe-PTY (pseudo-terminal) oluxhunywe ku-WebSockets kanye ne-xterm.js. Ama-ejenti nabantu bangavula amaseshini egobolondo abukhoma, baphazamise izinqubo, baxhumane kabusha kamuva bese bephinda badlale umphumela odlule. I-PTY ngayinye inohlu lwayo lokusebenza kanye nendawo ezungezile, futhi umphumela ufakwa kuseva ukuze amaklayenti axhumanisa kabusha akwazi ukuthola amalogi aphuthelwe.
Ngaphezu kokufinyelela kwegobolondo eluhlaza, i-Cloudflare iphinde inikeze "izimo zokusebenzisa ikhodi" eziqhubekayo zezilimi ezifana ne-Python, i-JavaScript kanye ne-TypeScript. Ngokungafani nabagijimi abaningi abancane abenza ingxenye ngayinye yocezu olulodwa, lezi zimo zigcina izinto eziguquguqukayo, ukungenisa kanye nesimo kuzo zonke izingcingo, njenge-notebook ye-Jupyter. Ama-ejenti angalayisha idatha kukholi eyodwa, ayiguqule kwenye futhi anikeze amashadi noma amathebula e-HTML ngaphandle kokuhlaziya njalo nokungenisa kabusha konke.
Ngemisebenzi yokuthuthukisa iwebhu, ama-sandbox e-Cloudflare asekela izinqubo zangemuva, ukuhlolwa kwezempilo kanye nama-URL okubuka kuqala bukhoma. I-ejenti ingaqala npm run dev njengomsebenzi wangemuva, bukela amalogi kuze kube yilapho iseva isilungile, bese uveza imbobo ngemuva kwe-URL yokubuka kuqala yomphakathi. Izindlela ezifana nalezi waitForPort() or waitForLog() vumela ama-ejenti alandelele izenzo ngokusekelwe ezimpawini zokulungela zangempela esikhundleni sokungazi lutho sleep(2s) ukuqagela.
Imisebenzi yokusebenza eqhutshwa yimicimbi ithola ukukhuthazwa okuvela ezintweni zokuqala zokubuka amafayela ezisekelwa yindlela ye-inotify ye-Linux. I-ejenti ingabhalisela izinguquko ngaphansi kwe- /workspace/src futhi kuphinde kusetshenziswe izivivinyo noma kwakhiwe ngokuzenzakalelayo lapho amafayela e-TypeScript eguqulwa. Lokhu kuyindlela efanayo yokuphendula abathuthukisi abathembele kuyo, kodwa kwenziwe kwaba yi-ejenti ngokusebenzisa ama-API afana sandbox.watch() kanye nokusakazwa kwemicimbi ethunyelwe yiseva.
Ukuze kuvalwe i-loop kumjikelezo wokuphila, i-Cloudflare ikhipha izithombe zangempela - ukuthwebula isimo sezinga le-VM okungabuyiselwa ngemizuzwana ukusuka kusitoreji se-R2. Izifinyezo ziyaqhubeka nesimo sesistimu yamafayela, ukulungiselelwa kwe-OS, ukuxhomeka okufakiwe kanye namafayela edatha; izinguqulo zesikhathi esizayo zizophinde zibuyisele isimo sememori ebukhoma se-resume esheshayo. Ama-ejenti (noma ama-orchestrator) angabangela izithombe ngokuhlelekile ezindaweni zokuhlola noma izimo ze-fan-out, bese efaka amabhokisi amaningi e-sandbox avela esithombeni esifanayo ukuze ahlole imibono efanayo ehlukene.
Ngokuphathelene namanani, i-Cloudflare ishintshele kumodeli "ye-CPU esebenzayo kuphela": ukhokhiswa imijikelezo ye-CPU esetshenzisiwe, hhayi isikhathi sokungenzi lutho ngenkathi ama-ejenti elinde ama-LLM. Uma kuhlanganiswa nemikhawulo emikhulu yemali ehambisanayo ye-"lite" kanye nezibonelo ezinkulu, lokhu kwenza kube nokwenzeka ukuphatha iqembu elikhulu lama-ejenti ngaphandle kokusebenzisa imali ezitsheni zokulala.
I-GKE Agent Sandbox ye-Google Cloud, ngokuphambene nalokho, ihlanganiswe ngokujulile ne-Kubernetes kanye ne-gVisor. Umqondo uwukukuvumela ukuthi usebenzise imisebenzi ye-ejenti kuma-pod ahlukanisiwe ngaphakathi kwamaqoqo akho. Udala i-GKE cluster (I-Autopilot ingavumela i-gVisor ngokuzenzakalelayo, kuyilapho amaqoqo ajwayelekile edinga amakilasi esikhathi sokusebenza acacile kanye nama-node anikwe amandla yi-gVisor), bese usebenzisa isilawuli se-Agent Sandbox nge-manifest eguquliwe.
Izinsiza ezimbili eziyinhloko ezenziwe ngokwezifiso ziqhuba imodeli: SandboxTemplate futhi SandboxWarmPool. SandboxTemplate isebenza njengohlelo olungasetshenziswa kabusha oluchaza ithempulethi le-pod (isithombe, amachweba, izinsiza, runtimeClassName: gvisor, njll.) ngezikhathi zokusebenza ze-sandboxed, njengendawo ye-Python. SandboxWarmPool igcina inani elihleliwe lama-pod afudunyezwe ngaphambilini lilungele ukufuna okusheshayo, igwema ukuqala okubandayo lapho i-ejenti idinga indawo entsha ngaphansi komzuzwana.
A Sandbox Router isevisi bese isebenza njengesango lethrafikhi phakathi kwamakhasimende nalawa ma-pod ahlukanisiwe. Ekuthuthukisweni, ungangena nge-tunnel traffic kubectl port-forward ngaphandle kokudalula ama-IP omphakathi. Ekukhiqizeni, ngokuvamile uzofaka i-router phambili ngokungena okufanele kanye ne-mTLS. Ngasohlangothini lweklayenti, i-Google inikeza umtapo wolwazi we-Python “Agenic Sandbox” ohlanganisa yonke impilo: dala isimangalo se-sandbox kusuka kuthempulethi, linda kuze kube yilapho isilungile, sebenzisa imiyalo ye-shell, bese uhlanza uma usuqedile.
Konke lokhu kusese "kungama-Kubernetes" angaphansi kwe-hood, kodwa kuhlanganiswe njengendaba ehambisanayo yezikhathi zokusebenza ze-agent. I-gVisor inikeza ukuhlukaniswa kwenqubo kanye ne-syscall, i-SandboxTemplate ilinganisa izilungiselelo, i-WarmPool ixazulula ukubambezeleka kokuqala, futhi iklayenti le-router kanye ne-Python lenza kube lula kuzinhlelo zokusebenza ezigxile ku-LLM.
Ngakolunye uhlangothi, uHeroku uncike esakhiweni esivuthiwe kakhulu: ama-dyno asebenza kanye kuphela. Sekuyiminyaka eminingi, abasebenzisi be-Heroku beqhuba imisebenzi yesikhashana - ukufuduka, izikripthi zokulungisa, imisebenzi yokuphatha - kuma-dynos esikhashana ajikelezayo ngokufunwa futhi afe lapho eseqedile. I-Heroku iphinde yasebenzisa le ngqalasizinda njenge-sandboxes yokwenza ikhodi, eyethulwe kanye neminikelo yabo ye-Managed Inference kanye ne-Agents. I-ejenti ibhala izingcezu ze-Python, Ruby, Node noma Go; I-Heroku izisebenzisa ngaphakathi kwama-dynos esikhashana futhi isakaze imiphumela emuva, ikhawulela i-blast radius esitsheni sesikhashana.
Ungafinyelela lawa ma-sandbox ngamathuluzi akhelwe ngaphakathi ku-Heroku's Agents API noma ngokusebenzisa amaseva e-Model Context Protocol (MCP) avulekile. Amaseva e-MCP aveza ama-endpoints amathuluzi ajwayelekile, ngakho-ke amaklayenti afana ne-Agentforce, i-Claude Desktop noma i-Cursor angaphatha i-sandbox ka-Heroku njenge-backend ejwayelekile, yokusetshenziswa kwekhodi ekude. Iseva ngayinye isekela imikhawulo ethile yesikhathi sokusebenza (njenge max_calls nge-loop ye-ejenti ngayinye) ukuvimbela ama-ejenti ukuthi angaphothi ezindongeni eziqinile nezibizayo.
Ama-Deep Agents kaLangChain anezela olunye uhlangothi ngokuhlanganiswa nabahlinzeki be-sandbox bezinkampani zangaphandle njenge-Runloop, i-Daytona kanye ne-Modal. Iphethini ilula: i-Deep Agent iyaqhubeka isebenza noma kuphi lapho ufuna khona (yendawo noma yamafu), kodwa noma nini lapho idinga ukusebenzisa imiyalo, ukudala amafayela noma ukwenza ikhodi, leyo misebenzi idluliselwa ku-sandbox ekude. Izikripthi zokusetha zingalayisha kusengaphambili iziguquguquko zemvelo, ziqoqe ama-repos, zifake amathuluzi nokuningi, ngakho-ke i-ejenti ngayinye ithola indawo ehlanzekile, elawulwayo. Abaphathi bokuqukethwe bese bephatha ukudalwa nokuhlanza, yize amadokhumenti encoma kakhulu ukuqapha amadeshibhodi abahlinzeki nganoma yimaphi ama-sandbox asekhohliwe asebenza isikhathi eside.
Ukusebenza, isimo kanye nokwahlukaniswa: kungani isivinini sibalulekile kuma-ejenti
Ibhokisi lesanti elihamba kancane kodwa elivikelekile kakhulu lizodlulwa ekusebenzeni; amathuluzi onjiniyela ayaphila noma afe ngesikhathi sokulibaziseka. Ama-ejenti okubhala amakhodi awazenzi njengemisebenzi yeqembu lasebusuku. Asebenzisa ama-loop asebenzisanayo: afunda ikhodi ethile, aphakamise ukuhlela, asebenzise izivivinyo, ahlaziye amalogi, amathuluzi okushayela ucingo, alinde abantu, bese ephinda. Ezimisweni zangempela, ahlola futhi amagatsha amaningi enkinga, ashiye eminye imizila bese ebuyela kweminye kamuva.
Yingakho amapulatifomu afana ne-Freestyle ecabanga kakhulu ngezikhathi zomjikelezo wokuphila we-VM we-sub-second kanye ne-semantics yesimo esicebile. Ama-VM abo ayimishini ye-Linux egcwele enokufinyelela kwezimpande, izinsizakalo ze-systemd, ukwesekwa kwe-virtualization okuhlanganisiwe kanye nenethiwekhi egcwele. Amadokhumenti athi ahlinzekwa ngaphansi kwama-800 ms kusukela ekushayweni kwe-API kuya ekusebenzeni i-VM, amiswe/aphinde aqalwe ngaphansi kwama-100 ms, kanye nekhono lokuthwebula noma ukufohla ama-VM phakathi kokusebenza ngokushaya kokusebenza okuncane. Babiza ngokusobala isimo sesiphequluli njengesizuzi: uma i-ejenti iqhube isiphequluli esimweni esithakazelisayo, ingafohla leyo VM izikhathi ezingu-20 kusukela esithombeni esifanayo kunokudala kabusha leso simo kusukela ekuqaleni.
I-SandboxWarmPool ye-Google ye-GKE iveza umqondo ofanayo ngokwemigomo ye-Kubernetes: gcina ichibi lama-pod afudunyeziwe ukuze ama-ejenti angakhokhi izinhlawulo eziphelele zokuqala ngokuzenzakalelayo ngokugijima okusha ngakunye. Izindawo zokusebenza zikaDaytona ezisekelwe kusithombe kanye nezinqubomgomo zokumisa/ukugcina/ukususa ngokuzenzakalela zilungisa umjikelezo wokuphila wezinhlobo ezahlukene zezikhathi: izindawo ezisebenzayo zokuthuthukisa, izivivinyo zesikhashana kanye nezisekelo ezihlala isikhathi eside.
Ukugcizelela kwe-E2B emisebenzini yangemuva, iziqondiso ezibukekayo, izinhlelo zamafayela ezihlukanisiwe kanye namavolumu angasetshenziswa kabusha kungolunye uhlangothi lwemali efanayo. Lezi zici zivumela i-ejenti ukuthi igcine iseva yonjiniyela noma i-harness yokuhlola isebenza ngenkathi ihlola izinguquko zekhodi, noma yabelane ngevolumu eqhubekayo kuma-sandbox amaningi esikhashana ngokuhamba kwesikhathi. Ngaphandle kwalokhu, ama-ejenti agcina esebenzisa imiyalo yesikhathi esisodwa futhi elahlekelwa umongo, okubulala umkhiqizo.
Indlela ewusizo yokuhlola noma yiliphi ibhokisi lesanti lomsebenzi we-ejenti ukubuza imibuzo embalwa engaqondile. Ngingakwazi yini ukujikeleza indawo entsha esikhathini esingaphansi kwesekhondi? Ngingakwazi yini ukulondoloza nokubuyisela isimo ngendlela ehlanzekile, okuhlanganisa nokwakha okungaphelele noma izikhathi zesiphequluli? Ngingakwazi yini ukuhlanganisa isimo ukuze sihlolwe ngasikhathi sinye? Ngingakwazi yini ukugcina izindawo zokusebenza ezihlala isikhathi eside kodwa ezisebenzisa kahle izinsiza ukuze kugeleze “ukubuya kamuva”? Lapho uthola izimpendulo eziningi “zebo”, kulapho ama-ejenti akho engaziphathi khona njengonjiniyela bangempela esikhundleni sabagijimi beskripthi abangenabo umbuso.
Izimfihlo, inqubomgomo yenethiwekhi kanye nokwethenjwa kwendawo yokusebenza njengendiza yokulawula yangempela
Ngisho noma kukhona ukuhlukaniswa okuphelele komsingathi, kulula ukwakha uhlelo olungavikelekile uma ungazinaki izimfihlo, inqubomgomo yenethiwekhi kanye nokwethenjwa kwendawo yokusebenza. Amadokhumenti e-sandbox kaDocker acacile kakhulu kulokhu. I-microVM kanye ne-daemon yayo yangasese ye-Docker yakha umngcele oyinhloko wokwethenjwa ne-host. Nokho, ngaphakathi kwaleyo VM, i-ejenti inokulawula okugcwele kwezinga lempande, futhi indawo yokusebenza eyabiwe ifakwe i-read-write. Ngokuzenzakalelayo, noma yikuphi ukuhlelwa kwefayela kubonakala ku-host ngokushesha. Ukuphuma kwenethiwekhi kwenqatshwa ngokuzenzakalelayo futhi kuvunyelwe kuphela ngemithetho ecacile, futhi izicelo ze-HTTP zisebenzisa i-proxy eseceleni kwe-host engafaka iziqinisekiso ngaphandle kokudalula izimfihlo ezingavuthiwe ku-VM.
Lokhu kusho ukuthi ukuhlukanisa umninikhaya kuyisinyathelo sokuqala nje; kusadingeka ucabange ngalokho ummeli angakwenza endaweni yokusebenza kanye nomhlaba wangaphandle. Amadokhumenti kaDocker axwayisa ngokusobala ukuthi uma i-ejenti ihlela izikripthi abantu bazozenza kamuva – ama-Git hooks, ama-CI configs, izincazelo zomsebenzi ze-IDE, Makefile okuhlosiwe, package.json izikripthi – umonakalo “ungagxuma” ubuyele ohlelweni lwe-host noma lwe-CI lapho lezo zikripthi zisebenza. Zize zigqamise nokuthi i-Git ibamba .git/ ungafiki ku- git diff, okwenza kube lula ukuqhubeka buthule kwe-logic enonya.
Ukusekela ubufakazi kunamandla kodwa kungabonakali. I-proxy ephumayo kaDocker iqinisekisa ukuthi izimfihlo zihlala ngaphandle kwe-VM, kodwa isavumela i-ejenti ukuthi isebenze ngokusebenzisa lawo ma-identity ngokumelene nama-host avunyelwe. Okunye ukugeleza - njengokubhala ama-env vars ngokwezifiso kumafayela afana nalawa /etc/sandbox-persistent.sh – phula lo mngcele ngokugcina ngamabomu izimfihlo ngaphakathi kwe-VM, okuphephile kuphela uma uthemba ngempela i-ejenti kanye ne-sandbox.
Ububanzi bokucushwa bubaluleke kakhulu njengezimfihlo. I-Docker's FAQ iphawula ukuthi izilungiselelo zezinga lomsebenzisi ezifana ~/.claude or ~/.codex Ku-host akukopishwa ebhokisini lesanti; kubonakala kuphela ukulungiselelwa kwephrojekthi endaweni yokusebenza eyabiwe. Amadokhumenti okulungiselelwa kwe-Anthropic aqinisa ukuthi izilungiselelo zezinga lephrojekthi - amathuluzi, izimvume, amaseva e-MCP, ama-hooks - zidlula lezo zezinga lomsebenzisi futhi zabelwana ngazo kuwo wonke amaqembu. Ngamanye amazwi, noma yiziphi izinqubomgomo, imiyalelo nama-plugin owanamathisela ku-repo aba yindawo eyinhloko ebonwa yi-ejenti.
Isiqondiso Samakhono se-OpenAI siveza amaphuzu afanayo ngesilulumagama esihlukile kancane. Amakhono (amaqoqo amathuluzi) angaletha izingozi zokukhipha idatha ngokushesha. Amadokhumenti axwayisa ngokudalula imakethe yamakhono yomphakathi engakahlelwanga, engasetshenziswa ngqo kubasebenzisi bokugcina, njengoba amafayela e-SKILL.md anonya angadlula izinqubomgomo, abangele izenzo ezibhubhisayo noma aveze idatha yangasese. Ancoma ukuhlola ama-Skills onjiniyela, ukuwahlola emisebenzini ethile yokusebenza, ukufihla izenzo ezinomthelela omkhulu ngemuva kokuvunyelwa okwengeziwe nokuhlolwa kwenqubomgomo, nokuphatha ama-Skills njengengxenye yemodeli yakho yokusongela.
Uma uhlanganisa izingcezu ndawonye, indiza yokulawula "yangempela" yama-sandbox e-ejenti ihlanganisa izendlalelo ezine. Ukuhlukaniswa kwe-Host kuvikela imishini yakho nama-cluster node. I-Workspace trust ivikela umuntu wesikhathi esizayo noma i-CI ezosebenzisa amafayela akhiqizwe ngaphakathi kwe-sandbox. Inqubomgomo yenethiwekhi ivikela izinhlelo zangaphandle kanye nemithombo yedatha yangasese. Ukuphathwa kweziqinisekiso kuvikela ubunikazi lapho umenzeli angasebenza khona. Umklamo oqinile unezimpendulo zazo zonke ezine, hhayi owokuqala kuphela.
Ngaphezu kwalokho, usadinga ukungabaza okunempilo mayelana nokufakwa ngokushesha kanye nokubanjwa kwe-ejenti. I-NIST, i-OWASP kanye ne-OpenAI zonke zichaza izinhlobo zephethini efanayo: okokufaka okungathembekile - i-README, ikhasi lewebhu, ifayela lelogi - kufaka imiyalelo enonya eqondisa kabusha ukuziphatha kwe-ejenti. Ukwenziwa okukhuliswe ngokubuyiselwa kanye nokulungiswa kahle akuxazululi lokhu ngomlingo. Ibhokisi lesanti elifakwe kahle kanye nenqubomgomo enhle ayikwazi ukuvimbela imodeli ukuthi ikhohliswe, kodwa inganciphisa kakhulu ukwehla uma kunjalo.
Amapulatifomu efu kanye nezikhathi zokusebenza ze-ejenti seziqala ukufaka ikhodi kulezi zifundo. Ama-proxies ayimfihlo, ama-domain aphumayo abhalwe ohlwini oluvunyelwe, ama-repo-scoped configs, ama-subagents anekhono elincane, ukugeleza kokuvunywa okusekelwe ku-hook kanye nama-sandbox aphindaphindwayo konke kuyizingxenye zephazili efanayo: yamukela ukuthi amamodeli ayakwazi ukwenza amaphutha, futhi uthuthukise imvelo ukuze izindleko zalokho kwenza amaphutha zihlale zilinganiselwe.
Kuzo zonke izilungiselelo zendawo kanye nezamafu, ibhokisi lesanti lokwenza lama-ejenti licatshangwa kangcono njengomugqa odwetshwe ngokucophelela: alenzi imodeli ibe hlakaniphe, lenza amaphutha ayo angabi yinhlekelele futhi abonakale kalula. Ngokuhlanganiswa okufanele kohlelo lwamafayela, inqubo, inethiwekhi, izilawuli zemfihlo kanye nomjikelezo wokuphila, kanye nokufundisa okuhlakaniphile kwe-ejenti mayelana nendawo yayo, ungavumela izinhlelo ze-AI ukuthi zikopishe ama-repo, ziqhube izivivinyo, ziqalise iziphequluli futhi zithinte nezinhlelo ezifana nokukhiqiza - ngaphandle kokuzinika okhiye bakho konke okukhathalelayo.
Lokhu kusho ukuthi ukuhlukanisa umninikhaya kuyisinyathelo sokuqala kuphela; kusadingeka ucabange ngalokho i-ejenti engakwenza endaweni yokusebenza kanye nomhlaba wangaphandle, okuhlanganisa ne-riesgos como. ukukhishwa kwekhodi kude. Amadokhumenti kaDocker axwayisa ngokusobala ukuthi uma i-ejenti ihlela izikripthi abantu bazozenza kamuva – ama-Git hooks, ama-CI configs, izincazelo zomsebenzi ze-IDE, Makefile okuhlosiwe, package.json izikripthi – umonakalo “ungagxuma” ubuyele ohlelweni lwe-host noma lwe-CI lapho lezo zikripthi zisebenza.
