Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

AI coding agents run commands on their own, and one bad step can delete files or leak credentials. This talk shows why plain containers fall short, then demonstrates how Docker Sandboxes isolate agents locally with microVMs, network policy, and credentials the agent never sees, and how GKE Agent Sandbox carries the same protection into production on Kubernetes.