loading
loading
An isolated environment where generated code or agent actions can run without touching real user data or production systems.
A sandbox limits blast radius. Code execution, browser control, file edits, and third-party calls happen inside a container, VM, test account, or mocked workspace instead of the real environment. It is the difference between testing a migration and accidentally running it against production.
Plainly
Think of Sandbox as the lock and rules that keep people and data safe. An isolated environment where generated code or agent actions can run without touching real user data or production systems.
In practice
Use it when a workflow touches secrets, permissions, user data, payments, or untrusted input. In practice, define the owner, input, output, and failure mode before you rely on it.