👀96
🔥85
AWS open-sources Strands Box: OS isolation plus temporal Dogwood policies to rein in agents running in YOLO mode
On Oct 7 AWS released Strands Box v0.1.0, an open-source (Rust, Apache 2.0) sandbox for AI agents. It pairs OS-level isolation with the Dogwood policy language: shell, Python, outbound HTTP and MCP calls all pass through one default-deny policy engine with a shared event history, so rules can depend on earlier actions and elapsed time. A gateway injects credentials so the agent never sees the secrets. Preview supports macOS on Apple silicon only; Linux is in development.
Key Takeaways
- Release: v0.1.0 shipped 2026-10-07 17:24 UTC, written in Rust, Apache 2.0 (GitHub)
- Default deny: engine-checked operations need a matching permit, and forbid overrides it (Dogwood)
- Temporal rule example: an agent may post Slack status updates at most 3 times per 10 minutes; git push timing and API spend caps work the same way (The Register)
- Platforms: macOS 15+ on Apple silicon only for now; Linux in development, Windows on the radar, AgentCore / ECS / Kubernetes planned
- Benchmarks: AWS has not published performance or security benchmark numbers
Linked Models & Agents:
