Docker's free microVM sandboxes run coding agents unattended
One command installs it, any agent plugs in, and the host stays sealed — as Claude Code makes auto mode the default Aug 14 and Alibaba opens Qwen to devs.
Copy markdown
Docker Sandboxes: one command, then let the agent off the leash
Docker just shipped Sandboxes — disposable microVM environments that run coding agents like Claude Code, Codex, Copilot CLI and OpenCode in full skip-permissions mode without risking your machine. Install is one line (brew install docker/tap/sbx, winget install Docker.sbx, or the Linux docker-sbx package), it's free, and no Docker Desktop required.
Why it's a microVM, not just another container
Every session is its own microVM with its own kernel on the native hypervisor (Hypervisor.framework, WHP or KVM), with only your project mounted. Secrets sit in the OS keychain and a proxy injects them as auth headers only when the request hostname matches — so a rogue agent can't leak your tokens. YAML "kits" and snapshot templates make setups reproducible.
Claude Code makes auto mode the default on Aug 14
From Aug 14, new Claude Code sessions on Pro, Max and Team default to auto mode: the agent runs safe actions without stopping for per-step approval. Anthropic cites third-party tests where auto mode blocked 89% of harmful actions versus 13.6% for human reviewers, and 0 of 720 prompt-injection attacks landed. You can still switch back to manual in settings — decide before the 14th.
Alibaba opens the Qwen platform to outside developers
Alibaba launched the Qianwen Open Platform, letting third-party devs build custom Qwen agents that run across phones, PCs and smart glasses through standardized integration protocols. Launch partners include SF Express, Ziroom and Midea — a bid to seed an agent ecosystem on top of the newly-opened Qwen3.8 weights.
Build this weekend: a safe overnight refactor agent
Put the two together — a Docker Sandbox plus Claude Code auto mode — and you can point an agent at a repo and let it run a big refactor or test-writing pass unattended overnight, with your filesystem and credentials sealed off. Wake up to a diff to review instead of a machine you have to trust.