> Markdown version of [/events/world-congress-2026-europe/sessions/1236-ai-sandboxes-running](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1236-ai-sandboxes-running). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AI Sandboxes:  Running Coding Agents Safely in Production-Grade Environments


- **Date:** Friday, Jul 10, 2026
- **Time:** 09:45–11:45 (120 min)
- **Room:** Room M3 (18 Seats)
- **Event:** World Congress 2026 Europe

## Description

The number of cyber attacks and security risks related to Coding Agents has sky rocketed. AI coding agents like Claude Code, Codex CLI, and Gemini CLI don’t behave like your typical developer tools. They install system packages, modify configurations, delete files, run services, and even spin up Docker containers, often requiring constant permission prompts or risky access to your host machine.

This talk explores Docker Sandboxes as a new execution model for autonomous coding agents. Built on microVM-based isolation, Docker Sandboxes provide disposable, agent-safe environments where coding agents can run unattended while remaining fully isolated from the host system.

We’ll walk through why traditional approaches like OS sandboxing, containers, and full virtual machines, break down for agent workflows, and how Docker Sandboxes combine the developer experience of containers with the hard security boundaries of VMs. Using live examples, we’ll show how agents can safely run Docker-in-Docker, install dependencies, access only the project workspace, and be reset instantly. 

By the end of this session, you’ll have a clear mental model for when and how to use Docker Sandboxes to unlock higher levels of agent autonomy without compromising safety, security, or developer experience.

## Speakers

### [Kristiyan Velkov](https://www.wearedevelopers.com/@kristiyan-velkov)

Principal Frontend Developer at Jakala
### [Shivay Lamba](https://www.wearedevelopers.com/@shivay-lamba)

Senior Software Engineer at Couchbase


## Related talks at this congress

- [YOLO Developer Workflows with a Coding Agent in a Box](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1394-yolo-developer) — Manuel de la Peña
- [GenAI Is a Junior Dev With Root Access](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1213-genai-is-a-junior) — Julian Totzek-Hallhuber
- [The day the chatbot asked for sudo](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1027-the-day-the-chatbot) — Alex Olivier
- [Always-On Autonomous AI Agents: Exploring the OpenClaw Abstraction](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1235-always-on-autonomous) — Anshul Jindal, Tsubasa Onishi