Sandbox Security

Hi,

This is more a question than an issue (so please tell me if I should send it elsewhere).

Nice work you have done with Sandcastle.

I thought at first that this used Docker Sandbox (sbx) under the hood. But after digging a little I found out that it uses a docker container. I suspect that many/some will think the same as me. Since the words docker and sandbox both appear in the readme.

An agent can escape a docker container while docker sandbox is a different technology specifically built to stop agents from escaping. You are well aware of this of course and I saw on your youtube channel that you are not very fond of Docker Sandbox. And I agree that it can be quite difficult to work with although I see great potential in the technology as Docker keeps developing it.

My question is how the agents are "sandboxed" when I use Sandcastle in combination with docker. Is it "only" the docker container ? I cannot see it in the readme.

Regards Jesper