Not a Docker Wrapper but an Execution Protocol for Agents — Dissecting OpenSandbox
I cloned OpenSandbox, a 14.5k-star repository created eight months ago, and traced its four API specifications, FastAPI control plane, Go execution daemon, Docker and Kubernetes runtimes, egress layer, and Credential Vault. It looks like an SDK for creating sandboxes and running commands, but the real product is a protocol boundary that keeps agent code stable while execution environments change. This analysis covers runtime injection, credentials that stay outside workloads, pools and snapshots, and the caveats to check before adoption: default runc, backend capability gaps, and independently versioned components.
- agent-engineering
- ai-infrastructure
- sandbox
- kubernetes
- open-source