Docker 发布 Cloud Sandboxes，支持代理本地云端迁移
原标题：Docker Cloud Sandboxes Provide a Consistent Sandbox Abstraction Across Laptop and Cloud
AI 摘要
Docker 推出 Cloud Sandboxes，为 AI 编码代理提供基于硬件强制 microVM 隔离的托管执行环境，可通过统一 CLI 在本地与云端之间用一条命令迁移沙箱，支持并行运行多个长时任务。同时发布按 Docker Sandbox Kit 规范预配置的 Kits，v3 规范将 Kits 打包为标准 OCI 镜像。社区反馈指出沙箱只解决部分问题，代理仍需连接外部服务，可能带来攻击面，有人主张采用基于对象能力的权限控制。
正文节选
Docker Cloud Sandboxes provide secure, hosted execution environments for running AI coding agents on Docker-managed infrastructure. Built on hardware-enforced microVM isolation, the platform provides a consistent execution environment and unified CLI workflows for seamlessly moving workloads from local machines to the cloud. Docker Cloud Sandboxes are an evolution of Docker Sandboxes, which Docker introduced earlier this year to provide local microVM environments where coding agents could operat