Glossary Sandbox
Sandbox
AgenticAI
Definition
The boundary around what an agent's commands may read, write and reach — a directory, a network allowlist, a set of credentials — enforced outside the model
The sandbox says what a task was given. A command can often reach more than that; the rule is that reachable is not the same as provided, and a denial on something the task does not need is the boundary working.
On this machine the sandbox is why gh, git push and the dev server run outside it, and why a sandboxed pnpm empties node_modules — traps recorded so they are not rediscovered. The Dictionary of AI Coding has a longer treatment.