--- title: "Building Agents that Don't Break Themselves" url: https://daily.dev/posts/building-agents-that-don-t-break-themselves-o16cjgdmj source_url: https://fly.io/blog/building-agents-that-dont-break-themselves type: article source: "Fly.io" published: 2026-06-18T11:02:29.746Z updated: 2026-06-18T11:02:57.364Z tags: ["security", "ai-agents"] reading_time: 7 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Building Agents that Don't Break Themselves **[Fly.io](https://daily.dev/sources/flydotio)** · 7 min read · 0 upvotes · 0 comments ## Summary Running AI agents safely requires separating where the agent lives from where it executes code. Using disposable sandboxes (called Sprites on Fly.io) for command execution protects the agent's host environment from destructive operations. Two real-world examples illustrate this: SpriteDoc spins up a fresh sandbox per user session with ephemeral credential injection so tokens are never stored at rest, while Hermes Agent keeps a persistent sandbox per task to preserve installed state between runs. Both approaches allow agents to skip manual approval prompts for dangerous commands since the sandbox acts as the security boundary. Checkpointing sandbox state before risky operations enables fast rollback in seconds using copy-on-write snapshots, making unattended agent execution practical. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Code And Let Live](https://daily.dev/posts/code-and-let-live-haeiv3yfw) · Fly.io · 4 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/building-agents-that-don-t-break-themselves-o16cjgdmj)