A sandbox is the isolated environment an agent runs in. On Heighliner every agent gets its own, and each fleet gets its own network namespace.
Two rules make the sandbox useful for agents, not just for code:
- Keys stay outside. Your model key and connector credentials are attached by the gateway, outside the sandbox. The agent gets short-lived, narrow credentials, never your keys.
- One way out. Network egress leaves only through Heighliner's gateways, which is where budgets, credentials and the audit trail are enforced.
Between runs, a recurring agent's sandbox sleeps instead of holding a machine.
Related
- SecurityHow Heighliner contains AI agents: a sandbox per agent, keys outside the sandbox, egress through a gateway, approvals with escrow and a hash-chained audit trail.
- FleetA fleet is one or more AI agents running one harness under one manifest, one budget and one policy. A single scheduled agent is a fleet of one.
- Heighliner vs hosted agent sandboxesHosted sandbox services give an agent an isolated machine through an API. Heighliner runs whole fleets with budgets, approvals and audit around them. Which do you need?