<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Sandbox on Kunal Kushwaha</title><link>https://kunalkushwaha.github.io/tags/sandbox/</link><description>Recent content in Sandbox on Kunal Kushwaha</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 11 Aug 2026 10:00:00 +0900</lastBuildDate><atom:link href="https://kunalkushwaha.github.io/tags/sandbox/index.xml" rel="self" type="application/rss+xml"/><item><title>Give the Agent a Desk, Not Your Keys</title><link>https://kunalkushwaha.github.io/2026/08/11/give-the-agent-a-desk-not-your-keys/</link><pubDate>Tue, 11 Aug 2026 10:00:00 +0900</pubDate><guid>https://kunalkushwaha.github.io/2026/08/11/give-the-agent-a-desk-not-your-keys/</guid><description>You would never give a new hire root on the machine holding your keys. Kagebox is an experiment in giving an autonomous agent a whole machine that is not yours: its own kernel, credentials that stay host side, a latch it cannot reach, and a spend cap. Every layer of it can fail open without saying so, and that turned out to be the lesson.</description></item></channel></rss>