Comparison

An overview of approaches to sandboxing AI agents.

	Anthropic devcontainer	Docker Sandboxes	NVIDIA OpenShell	o3s
GPU	❌	Dedicated, via VFIO	Dedicated, via VFIO Shared, via CDI	Shared, via CDI
Isolation	Container	MicroVM	MicroVM Container	Container
Login required	❌	✅	❌	❌
Network	Allowlist, in agent container	Allowlist, in host proxy	Allowlist, in supervisor	Allowlist, in isolated network containers
Open source	✅	❌	✅	✅
PII filtering	❌	❌	Bring your own middleware	Bring your own middleware
Projects	One per container	Multiple mounts	Multiple mounts	All in one persistent workspace
Secrets	In agent container	On host, injected by proxy	In gateway, injected by supervisor	On host, injected by proxy container
Tools	Dockerfile	Kits	Dockerfile	Dev container features