核心信息
腾讯AI开源了 CubeSandbox——一个基于安全虚拟机的沙箱：每个AI智能体任务都在独立内核中运行，未受信任的代码不会接触你的数据；凭据保存在保险库中并在网关侧注入，出错时还可以回滚到快照。
要点
- 每个任务运行在独立内核中，未受信任的智能体代码不会触及你的数据或凭据。
- 凭据存放在保险库中，只在网关处注入，绝不出现在沙箱内部。
- 快照回滚相当于为智能体操作提供“撤销”按钮，与隔离共同构成安全性的两面。
腾讯开源 CubeSandbox：安全的智能体隔离与回滚
原始推文
Can we get a redo button while we're at it? Secure VM put agent isolation on everyone's mind. Rollback is the other half of safety. When a step goes wrong, you want to undo it. @CubeSandbox is open source. Agents go off-script all the time, so each task gets its own kernel and untrusted code never touches your stuff. Your credentials sit in a vault and get injected at the gateway, never inside the sandbox. And when a step still goes wrong, you roll back to a snapshot instead of starting over. 🤯repo: https://t.co/oWfC7nsrzs