Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes

Claudio Masolo — Fri, 12 Jun 2026 11:00:00 GMT

Microsoft has announced the public preview of Azure Container Apps Sandboxes. This new ARM resource type is Microsoft.App/SandboxGroups, runs untrusted code generated by agents in hardware-isolated environments. Each sandbox starts from an OCI disk image in less than a second. It can scale to thousands of instances at once and costs nothing when idle.

By Claudio Masolo

How OpenAI Built a Secure Windows Sandbox for Codex Agents

Leela Kumili — Fri, 05 Jun 2026 14:37:00 GMT

OpenAI details Codex Windows sandbox architecture, showing how SIDs, ACLs, restricted tokens, and dedicated sandbox accounts enable safe execution of autonomous coding tasks. The design balances isolation with real developer workflows and shows how OS security primitives must be composed for AI agents on local development environments.

By Leela Kumili

InfoQ - Security - News

Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes

How OpenAI Built a Secure Windows Sandbox for Codex Agents