Docker Sandboxes run AI coding agents in isolated microVM sandboxes. Each sandbox gets its own Docker daemon, filesystem, and network ~ the agent can build containers, install packages, and modify files without touching your host system.