Docker and CNCF Partner on Open Sandbox Kit Spec for AI Agents
Docker has introduced the open source Sandbox Kit Specification to the CNCF, aiming to standardize AI agent permissions and tools using standard OCI images.
Before you start: versions, package names and storage identifiers change over time. Check the commands against the official documentation for your setup before running them, especially anything that creates, deletes or overwrites data.
Docker and the Cloud Native Computing Foundation (CNCF) have partnered to introduce an open specification for AI agent permissions and packaging. Announced at the WeAreDevelopers conference, the Docker Sandbox Kit Specification aims to establish a vendor-neutral standard for defining what autonomous agents are allowed to access.
As AI coding agents take on mutable tasks like installing packages, calling APIs, and handling credentials, teams often struggle to audit scattered configuration rules. The new specification leverages existing Open Container Initiative (OCI) image standards to bundle an agent, its tools, and a typed list of requested permissions into a single, pinnable artifact.
How Sandbox Kits Work with OCI Standards
Rather than introducing a proprietary format or forking existing container specifications, Sandbox Kits utilize built-in extension points within the OCI image format. This design ensures that a Kit can be built, pushed, pulled, signed, and scanned using current container registries and security tooling without deploying new infrastructure.
By packaging permissions directly into the image, the capability requirements travel alongside the agent code. Reviewers can easily inspect diffs when an agent requests expanded privileges, and conforming runtimes can programmatically enforce those operational boundaries.
Ecosystem Adoption and Neutral Governance
Docker is submitting the Apache 2.0-licensed specification to the CNCF for neutral, open governance to prevent industry fragmentation. Initial ecosystem development includes early contributions and collaboration from major infrastructure, security, and developer tool vendors such as AWS, Box, Datadog, Dynatrace, JFrog, Palo Alto Networks, and Snyk.
While Docker Sandboxes serve as the initial reference runtime enforcing these permissions, the open governance model is intended to encourage broader runtime support across the cloud-native landscape.
Source
Official announcement or documentation
Some links on this page may be affiliate links. If you buy through them we may earn a commission at no extra cost to you. See our affiliate disclosure.
