{
  "spec": "ai-agent.json/1.0 (aiia.ro)",
  "agent": {
    "name": "The Sandbox — VCN #42",
    "version": "1.0.0",
    "updated": "2026-07-18",
    "callable": false
  },
  "content": {
    "type": "presentation",
    "slides": 17,
    "languages": ["en"],
    "slides_list": [
      { "n": 1, "url": "https://vcn-42-sandbox.vercel.app/#1", "summary": "THE SANDBOX. Never run an agent's code on your host. Box it, snapshot it, nuke it. Facilitator: Rayyan Zahid, Vibe Coding Nights." },
      { "n": 2, "url": "https://vcn-42-sandbox.vercel.app/#2", "summary": "Everything you need is included: wifi, z.ai + Claude Code for the session, Nebius Token Factory credits, ticket tiers, schedule." },
      { "n": 3, "url": "https://vcn-42-sandbox.vercel.app/#3", "summary": "Untrusted agent code is its own threat class. \"I read it first\" does not scale." },
      { "n": 4, "url": "https://vcn-42-sandbox.vercel.app/#4", "summary": "Five times this went wrong: Replit deleted a live prod database (Jul 2025), EchoLeak zero-click exfil via Copilot (CVE-2025-32711), a malicious npm package stole files from Claude's working directory (2026), Mozilla 0Din tricked Claude Code into a reverse shell." },
      { "n": 5, "url": "https://vcn-42-sandbox.vercel.app/#5", "summary": "\"I read it first\" does not scale. Closing quote, transition to the options." },
      { "n": 6, "url": "https://vcn-42-sandbox.vercel.app/#6", "summary": "Four ways to box it: Docker, e2b, Daytona, gVisor compared." },
      { "n": 7, "url": "https://vcn-42-sandbox.vercel.app/#7", "summary": "Docker shares a kernel. e2b does not. Docker ~100ms start, free (shares host kernel); e2b Firecracker microVM, ~78-410ms, $150/mo Pro + $0.000014/vCPU-s." },
      { "n": 8, "url": "https://vcn-42-sandbox.vercel.app/#8", "summary": "A dev environment, or a syscall filter: Daytona (container dev env, sub-90ms, ~$0.0504/vCPU-hr) vs gVisor (user-space kernel, 10-30% overhead, free/OSS). Sandbox-per-task is today's default." },
      { "n": 9, "url": "https://vcn-42-sandbox.vercel.app/#9", "summary": "How we researched this talk: scouts to research/OPTIONS.md + research/THREAT.md to research/SUMMARY.md to slides, every number tagged VERIFIED or PLAUSIBLE." },
      { "n": 10, "url": "https://vcn-42-sandbox.vercel.app/#10", "summary": "Five scripts. Each one runs: overview of the runnable examples." },
      { "n": 11, "url": "https://vcn-42-sandbox.vercel.app/#11", "summary": "Task in. Code out. Code runs in the box. Never on your host." },
      { "n": 12, "url": "https://vcn-42-sandbox.vercel.app/#12", "summary": "Lab 1 and Lab 2: box first, then agent." },
      { "n": 13, "url": "https://vcn-42-sandbox.vercel.app/#13", "summary": "Lab 3: snapshot it, nuke it." },
      { "n": 14, "url": "https://vcn-42-sandbox.vercel.app/#14", "summary": "Let the agent trash the box, not your laptop. Snapshot, restore, nuke walkthrough." },
      { "n": 15, "url": "https://vcn-42-sandbox.vercel.app/#15", "summary": "One task. One sandbox. Gone when the task ends. Teardown by default." },
      { "n": 16, "url": "https://vcn-42-sandbox.vercel.app/#16", "summary": "This deck, built by 12 agents, 4 terminals, one agent room, today. Live exhibit: fetches /.well-known/ai-agent.json in front of the room." },
      { "n": 17, "url": "https://vcn-42-sandbox.vercel.app/#17", "summary": "Show the room your agent in a box. Demos, wrap, thanks to z.ai and Nebius Token Factory." }
    ],
    "examples": [
      { "file": "https://vcn-42-sandbox.vercel.app/examples/01_docker_sandbox.py", "technique": "Docker container isolation for agent-written code" },
      { "file": "https://vcn-42-sandbox.vercel.app/examples/02_e2b_sandbox.py", "technique": "e2b cloud sandbox (key-guarded)" },
      { "file": "https://vcn-42-sandbox.vercel.app/examples/03_daytona_sandbox.py", "technique": "Daytona dev-sandbox (key-guarded)" },
      { "file": "https://vcn-42-sandbox.vercel.app/examples/04_snapshot_restore.py", "technique": "Snapshot a clean state, let the agent trash it, restore" },
      { "file": "https://vcn-42-sandbox.vercel.app/examples/05_agent_in_the_box.py", "technique": "Point a coding agent at an isolated sandbox end to end" }
    ]
  },
  "publisher": {
    "author": "Rayyan Zahid",
    "role": "Facilitator, Immersive Commons",
    "canonical": "https://vcn-42-sandbox.vercel.app/",
    "linkedin": "https://linkedin.com/in/rayyanzahid"
  },
  "event": {
    "name": "Vibe Coding Nights #42: The Sandbox",
    "date": "2026-07-18",
    "time": "10:00-13:00 PT",
    "venue": "Frontier Tower, 9th Floor Annex, San Francisco",
    "url": "https://luma.com/vcn-42-the-sandbox",
    "hosts": ["Rayyan Zahid (Immersive Commons)", "Michalis Vasileiadis (Hacker Bob)", "Eric Mockler (AI Geneticist)", "Devinder Sodhi (Learning Layer Labs)"]
  },
  "provenance": {
    "room_id": "room_oromuk2hoag5mtjr",
    "protocol": "IC Agent-Rooms (ic_rooms_* MCP)",
    "built": "2026-07-18, 30-minute window, 12 agents across 4 terminals"
  },
  "x_build_prompt": {
    "note": "the prompt that built this deck, verbatim — 12 agents, 4 terminals, one agent room, ~30 minutes. Provenance only, not a standalone rebuild spec: the theme source deck, research files, and room protocol live outside what is served here.",
    "theme_source": "https://vcn-latam-metaprompting.vercel.app",
    "prompt": "We have our workshop today, VCN for sandboxes. We have only 30mins to come up with our full presentation! Lets use a coordination and communication solution by having an agent room for ourselves and using 4 different terminals with up to 3 agents each spawn and join. I want to use the theme we used for our Metaprompting class to make the presentation but then I want to make sure we have our research pipeline down, some tests, labs, examples, other things are there like wifi credits etc in the order of which our users will see things and everything deployed. And I want to make this presentation written in English, written in simple teaching language and not the CC-PRO Persona language. Lets create these agents for orchestration and tell me so I can spin up the 4 terminals. I wouldnt put HITL at all, just do end to end! Make sure we make it agent first and also put all relevant information required to make a headliner! Our research is good, but we also need doable examples. Go"
  },
  "license": "CC-BY-SA-4.0"
}