# VCN #42: The Sandbox

> A workshop deck for Vibe Coding Nights #42, "The Sandbox" — built live in 30 minutes by
> 12 agents in 4 terminals, coordinating through an Immersive Commons agent room. Never run
> an agent's code on your host: box it, snapshot it, nuke it.

Hosted by Vibe Coding Nights: Rayyan Zahid (Immersive Commons, Facilitator), Michalis Vasileiadis
(Hacker Bob), Eric Mockler (AI Geneticist), Devinder Sodhi (Learning Layer Labs).

Event: Saturday 2026-07-18, 10:00-13:00 PT, Frontier Tower 9th Floor Annex, San Francisco.
Tickets: https://luma.com/vcn-42-the-sandbox ($10 early-bird, $20 door, Frontier Tower members free).

## Core resources

- [Deck (HTML)](https://vcn-42-sandbox.vercel.app/) single-file, keyboard nav, URL-hash deep links (#1..#17)
- [Agent manifest](https://vcn-42-sandbox.vercel.app/.well-known/ai-agent.json) machine-readable
  slide list, sources, and the verbatim prompt that built this deck
- [A2A agent card](https://vcn-42-sandbox.vercel.app/.well-known/agent-card.json)
- [Runnable examples](https://vcn-42-sandbox.vercel.app/examples/README.md) stdlib-only sandbox
  patterns, no API keys required for the local ones
- Labs, the hands-on hour, step by step with checkpoints:
  [Lab 1](https://vcn-42-sandbox.vercel.app/labs/LAB1-first-box.md) stand up your first box,
  [Lab 2](https://vcn-42-sandbox.vercel.app/labs/LAB2-point-your-agent.md) point your agent at it,
  [Lab 3](https://vcn-42-sandbox.vercel.app/labs/LAB3-snapshot-nuke.md) snapshot, trash, restore, nuke

## The talk, in order (17 slides)

1. Cold open — "THE SANDBOX." Never run an agent's code on your host. Box it, snapshot it, nuke it.
2. What you get today — wifi, z.ai + Claude Code access, Nebius Token Factory credits, tickets, schedule
3. The threat — untrusted agent code is its own threat class. "I read it first" does not scale.
4. Five times this went wrong — Replit deleted a live prod database (Jul 2025), EchoLeak
   zero-click exfil via Copilot (CVE-2025-32711), a malicious npm package stole files from
   Claude's working directory (2026), Mozilla 0Din tricked Claude Code into a reverse shell.
5. Closing quote, transition to the options.
6. The options — four ways to box it: Docker, e2b, Daytona, gVisor
7. Docker shares a kernel, e2b does not — Docker ~100ms start, free; e2b Firecracker microVM,
   ~78-410ms, $150/mo Pro + $0.000014/vCPU-s
8. A dev environment or a syscall filter — Daytona (sub-90ms, ~$0.0504/vCPU-hr) vs gVisor
   (10-30% overhead, free/OSS). Sandbox-per-task is today's default.
9. Our research pipeline — scouts to research/OPTIONS.md + research/THREAT.md to
   research/SUMMARY.md to slides, every number tagged VERIFIED or PLAUSIBLE
10. Doable examples — five runnable scripts, one pattern each
11. The pattern punch — task in, code out, code runs in the box, never on your host
12. Lab 1 and Lab 2 — box first, then agent
13. Lab 3 — snapshot it, nuke it
14. Snapshot, restore, nuke walkthrough — let the agent trash the box, not your laptop
15. Teardown by default — one task, one sandbox, gone when the task ends
16. This deck's own live exhibit — fetches `/.well-known/ai-agent.json` in front of the room
17. Demos + wrap — show the room your agent in a box; thanks to z.ai and Nebius Token Factory

Full slide-by-slide summaries and links are in `.well-known/ai-agent.json`'s `slides_list`.

## Runnable examples (stdlib where possible, no API keys for the local sandbox patterns)

- https://vcn-42-sandbox.vercel.app/examples/README.md quick-start + comparison table
- https://vcn-42-sandbox.vercel.app/examples/01_docker_sandbox.py Docker container isolation
- https://vcn-42-sandbox.vercel.app/examples/02_e2b_sandbox.py e2b cloud sandbox (key-guarded)
- https://vcn-42-sandbox.vercel.app/examples/03_daytona_sandbox.py Daytona dev-sandbox (key-guarded)
- https://vcn-42-sandbox.vercel.app/examples/04_snapshot_restore.py snapshot a clean state, restore after the agent trashes it
- https://vcn-42-sandbox.vercel.app/examples/05_agent_in_the_box.py point a coding agent at an isolated sandbox end to end

## Provenance

Built live on 2026-07-18 by 12 agents coordinating in Immersive Commons agent room
`room_oromuk2hoag5mtjr`, in 4 terminals of 3 agents each, inside a 30-minute window. The verbatim
build prompt is carried in `.well-known/ai-agent.json` under `x_build_prompt`.

## License

CC-BY-SA-4.0. Agents are welcome to quote, summarize, and cite with attribution to
"Rayyan Zahid, VCN #42: The Sandbox, Vibe Coding Nights 2026."