--- title: YOLO Mode, Safely: MicroVM Sandboxes for Any Agent —... description: Rowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more. Rowan Christmas,... canonical: https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker | daily.dev og:description: Rowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more. Rowan Christmas,... og:url: https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6 og:image: https://api.daily.dev/og/posts/kwBc3Mtq6.png og:image:alt: YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker **[AI Engineer](https://daily.dev/sources/aidotengineer)** · 11 min read · 0 upvotes · 0 comments ## Summary Rowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more. Rowan Christmas, product manager at Docker, shows why harness-level guardrails aren't enough to protect your machine from your own agent, and how microVM sandboxes give you security by design. He demos Docker Sandboxes (sbx): one command spins up an isolated VM with its own kernel, filesystem isolation, secret placeholders, default-deny networking and a full audit trail. It works with Claude Code, Codex or anything else. He also previews agent identity, delegation chains and policy-based governance. In this talk: • How a coding agent with default permissions can surface sensitive data on your laptop • Why microVMs beat harness-level guardrails • Running any agent in a sandbox with a single command • Governance: network allow/deny, filesystem rules, MCP catalogs and what's coming next SPEAKER Rowan Christmas, Product Manager, Docker LinkedIn: https://www.linkedin.com/in/rowanchristmas/ LINKS Docker Sandboxes: https://www.docker.com/products/docker-sandboxes/ Docs: https://docs.docker.com/ai/sandboxes/ sbx releases (GitHub): https://github.com/docker/sbx-releases Docker: https://www.docker.com/ CHAPTERS 0:00 Intro 0:12 Hi from Docker 0:27 Docker Sandboxes (sbx) 0:52 Is your coding harness protecting you? 1:22 Hacking myself: from browser history to bank data 2:32 The security team's alert 3:22 Five prompts was all it took 3:47 MicroVMs: secure by design 5:07 Demo: claude vs sbx run claude 5:47 The same attack, sandboxed 6:12 Network egress blocked by default 6:47 Every Docker developer codes in sandboxes 7:07 Why the harness level isn't enough 7:52 Agent identity and delegation chains 8:46 Governance controls 9:11 Coming next: L7 and per-repo controls 9:46 Install and run any agent 10:31 Read-only mounts for related repos 10:56 Wrap-up Recorded at the AI Engineer World's Fair 2026 in San Francisco. Subscribe for more talks from the engineers building with AI. AI Engineer: https://ai.engineer YouTube: https://www.youtube.com/@aiDotEngineer X: https://x.com/aiDotEngineer LinkedIn: https://www.linkedin.com/company/aidotengineer/ #AISecurity #Docker #AIEngineer ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#ai](https://daily.dev/tags/ai), [#ai-engineering](https://daily.dev/tags/ai-engineering) [View this post on daily.dev](https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker","url":"https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6"},"datePublished":"2026-10-03T00:39:10.635Z","dateModified":"2026-10-03T02:26:20.692Z","description":"Rowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more.\n\nRowan Christmas,...","image":"https://i.ytimg.com/vi/OE_lLNCNfQo/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/OE_lLNCNfQo/sddefault.jpg","isAccessibleForFree":true,"articleSection":"AI Engineer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"AI Engineer","logo":"https://media.daily.dev/image/upload/s--u5PucxNT--/f_auto/v1724338940/logos/aidotengineer","url":"https://daily.dev/sources/aidotengineer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/yolo-mode-safely-microvm-sandboxes-for-any-agent-rowan-christmas-docker-kwbc3mtq6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,ai-engineering","timeRequired":"PT11M","video":{"@type":"VideoObject","name":"YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker","description":"Rowan tried to hack himself with his own coding agent. Five prompts later it had found his browser history, his bank accounts and more.\n\nRowan Christmas,...","thumbnailUrl":"https://i.ytimg.com/vi/OE_lLNCNfQo/sddefault.jpg","uploadDate":"2026-10-03T00:39:10.635Z","duration":"PT11M","url":"https://api.daily.dev/r/kwBc3Mtq6","embedUrl":"https://www.youtube.com/embed/OE_lLNCNfQo"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"AI Engineer","item":"https://daily.dev/sources/aidotengineer"},{"@type":"ListItem","position":3,"name":"YOLO Mode, Safely: MicroVM Sandboxes for Any Agent — Rowan Christmas, Docker"}]} ```