Docker has introduced SBX, a microVM sandbox that isolates AI coding agents within dedicated runtime environments. The tool prevents autonomous agents from harvesting host file data, leaking credentials, or altering unauthorized repositories.