Anthropic releases sandbox-runtime, an open-source tool to isolate AI agents
Anthropic released sandbox-runtime, an open-source tool that confines any process within file and network limits without spinning up a container. It is distributed on npm as @anthropic-ai/sandbox-runtime, under the Apache-2.0 license, and requires Node.js 22.12 or later. It uses the host operating system's isolation capabilities and applies restrictions to the entire process tree. By default it allows reads, blocks writes unless authorized, and denies network access with exceptions through an allowed-domain list. Anthropic reports an 84% reduction in permission prompts in its internal use of Claude Code.
In 45 seconds
- The tool is installed from npm and applied by prefixing the srt command to the instruction to be run in isolation.
- It does not create a separate isolated machine per run: it uses operating system isolation, with different dependencies on macOS, Linux and Windows.
- Rules are stored in ~/.srt-settings.json and include allowed domains, blocked read paths and write exceptions.
Read the full story at El Ecosistema Startup
IASummary generated by artificial intelligence from a story by El Ecosistema Startup. It may contain errors: the original source prevails.
Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.