Docker Sandboxes puts each agent session in a dedicated microVM. Each microVM runs a private Docker daemon inside the VM boundary. That blocks access to the host.
A new cross‑platform VMM runs on macOS, Windows, and Linux hypervisors. It slashes cold starts and runs full Docker build, run, and compose workflows per sandbox.
