Docker Sandboxes Aim to Isolate AI Coding Agents from Developer Machine Risks

·5 views

A Docker developer engineer presented at AI DevCon London on the security risks of running AI coding agents directly on developer machines, where they can access source code, API tokens, SSH keys, and other sensitive data. The talk argued that prompt-level guardrails are insufficient once an agent can autonomously execute commands, install packages, and interact with external services. Risk escalates when three factors converge: private local data, untrusted input content, and the agent's ability to communicate externally. Docker is developing Sandboxes, isolated microVM environments designed to run coding agents locally while restricting their access to the broader developer machine. The core argument is that security enforcement must exist at the infrastructure level, not within the model's instructions alone.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Next.js API Routes vs App Router Route Handlers: Key Differences Explained

Next.js offers two ways to create HTTP endpoints: Pages Router API routes and App Router route handlers, each built on different foundations. Pages Router API routes use Node.js request and response wrappers, always run on the Node.js runtime, and require developers to set cache headers manually. App Router route handlers, introduced with the App Router, are built on the Web Fetch API and support Edge runtime, native streaming, and declarative ISR-style caching via a revalidate export. A practical example shows that a route handler fetching posts from a Sanity CDN requires less boilerplate than its Pages Router equivalent, with caching handled automatically by Next.js's data cache layer. Developers migrating between the two should pay close attention to differing caching semantics and runtime defaults, as these differences can cause unexpected behaviour.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS Runtime Migration Error Map: What Breaks First on Each Upgrade Path

AWS will block Python 3.9 Lambda function creates and updates starting February 2027, forcing developers to migrate to newer runtimes. A structured error map published on DEV Community sequences the specific errors developers will encounter for each upgrade path — Python 3.9 to 3.12, 3.12 to 3.13, and Node.js 16/18 to 20/22 — in the order they typically appear. Python 3.12 migrations front-load the most breakage due to mass stdlib removals under PEP 594, including modules like distutils, imp, and asyncore, while Node.js upgrades center on AWS SDK v2 no longer being pre-installed and OpenSSL 3 rejecting legacy cryptographic formats. Each error listed in the map links to a dedicated fix, allowing teams to anticipate and resolve issues before they surface in production. The resource is intended as a sequenced reference guide rather than a deep-dive explainer, helping developers debug runtime upgrades more efficiently.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Thoughtworks Unconference Highlights Infrastructure Gaps in Agentic AI Engineering

A recent Thoughtworks Technology Podcast episode featured Ken Mugrage, Kief Morris, and Andrew Harmel-Law debriefing an unconference on the future of software engineering held in Switzerland with Martin Fowler. The discussion shifted from excitement about AI capabilities to identifying unresolved problems around trust, control, governance, and boundaries in agentic systems. A key concern raised was the risk of unsupervised agents connecting development environments to production databases, with participants arguing that infrastructure controls, not prompt engineering, must enforce such boundaries. Andrew Harmel-Law noted that AI agents tend to be sycophantic and often fail to respect codebase boundaries described only in instructions, prompting some teams to revert to separate repositories as a blunt enforcement mechanism. The episode underscores a growing consensus that reliable multi-agent systems require hard environmental constraints rather than behavioral guardrails alone.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer loses two weeks to silent IndexNow failures caused by a missing keyLocation field

A developer running a static site on GitHub Pages spent two weeks submitting URLs via IndexNow, receiving 202 success responses each time, yet the site remained unindexed on Bing. The root cause was a missing keyLocation field in the API payload: IndexNow verifies ownership by fetching a key file from the domain root, but GitHub Pages project sites host files under a subpath, causing the verification fetch to return a 404 and Bing to silently reject submissions. Yandex compounded the confusion by returning 202 with a success message even for unauthorized requests, masking the underlying error. Bing, by contrast, returns a clear 403 with an error message when the key cannot be verified, a response the developer missed by only checking HTTP status codes. The fix is straightforward: include the keyLocation field pointing to the actual key file path, and verify the key URL resolves correctly before making any submissions.

0 comments Read more at DEV Community