sandbox VM

A sandbox VM is a fake computer built inside a real one, sealed off so that whatever happens inside it never spreads to the real machine. It's like running a dangerous experiment inside a sealed glass box in a lab — if something catches fire or spills inside the box, everything outside stays fine.

AI agents need this kind of box because when you let them write and run code on their own, they might accidentally delete an important file or install the wrong program. So instead of letting them touch the real computer, you spin up a temporary fake one called a sandbox VM, and let the agent run code and edit files only inside it. Once the task is done, you can throw away the whole fake computer without the original machine being affected at all.

As more AI agents start writing and running their own code, or operating a user's computer on their behalf, this kind of isolated space has become a kind of safety net. Even if the agent issues an unexpected command or runs faulty code, the damage stays contained inside that box.

When using a coding agent or automation tool, check its settings menu or documentation for an option like 'sandbox' or 'isolated execution.' Turning this on makes the agent run code in a temporary virtual environment instead of your real computer. Try checking whether that virtual environment disappears after the task is done, and whether only the results get moved back to your computer — it'll give you a feel for how the whole thing works.