It seems like everybody is releasing agent sandboxes these days; I guess I am too. I saw an article on Hacker News recently about Microsoft’s release of MXC, and I wanted to try it out. I ended up wrapping a CLI application around it to make spinning up a new sandbox to wrap a coding harness quick and easy.
But why? Claude has a sandbox, and so do other harnesses. Why not use that one? Well…
Claude is quick to bypass its sandbox whenever the going gets tough!
So here I am, putting my “sandboxed” Claude1 in a sandbox. Because sometimes your decorative moat needs a real moat. I (and by “I”, I mean mostly Claude under my direction as chief critic) built boxed, which wraps MXC in a command-line tool that makes it easy to launch a tool within the sandbox, and so far I am loving it. I’ve shared it on my Github, so you can try it out (or just ask your agent friends to build one for you). It’s the trendy thing to do these days, after all.
PS: Why not use any of the numerous sandboxes or containers out there already? This was more fun!
-
OK, I happily admit that the sandbox bypass in the image is not serious; in fact, Claude is doing something that I wanted it to do. But I’ve also had it do some things I was less happy about (and I wasn’t in the mood to capture a screenshot at those times). But mostly, if your pet lion can choose to leave its enclosure any time it likes, you’re not really protected from your lion. I like my lions; I just don’t want them to maul me or chew on my stuff. ↩︎