AI SECURITY • 337 / 397
Understand how untrusted text, tools and autonomy create new attack paths.
Sandbox
A sandbox isolates execution so untrusted actions have limited access to the host or network.
Think of it like
Think of Sandbox as an input-trust or privilege problem: words can influence software decisions, so boundaries must be explicit.
Real life
Email, documents and web pages can become hostile inputs to AI systems through attacks involving Sandbox.
SRE lens
Run generated code or risky file processing in restricted environments.
Remember thisA sandbox isolates execution so untrusted actions have limited access to the host or network.