Research, experiments, and implementation notes filed under docker.
Docker Sandboxes Put CI Agents Behind a Smaller Boundary
Docker's GitHub Agentic Workflows integration gives coding agents a microVM sandbox with a private Docker daemon, making CI automation more useful without handing it the whole runner.
Coding Agent Allowlists Are Not A Security Boundary
A practical look at why trusted-command allowlists can fail for coding agents, and what teams should move into the sandbox boundary instead.
Docker Sandboxes Make ESP32 Agent Workflows Less Risky
A practical look at reproducible ESP32 firmware builds, remote serial flashing, and safer AI-assisted hardware loops with Docker Sandboxes.