Vercel blog argues network boundary is essential for AI agent sandboxes

Running untrusted code safely requires more than microVM isolation from the host. As AI agents gain ability to read files, execute commands, and generate programs, sandboxing without egress control contains the process but not its consequences, including data exfiltration and attacks on external systems.