Docker Sandbox Kit Spec: Authority as Code

From Dockerfile to Kit: the Docker Sandboxes Kit Specification

Docker’s Sandbox Kit Specification v3 packages an AI agent’s network rules, credentials, and volumes as an ordinary, pinnable OCI image.