--- author: "Umesh Malik" canonical: "https://umesh-malik.com/blog/tag/sandboxing" description: "Explore articles tagged with Sandboxing by Umesh Malik — AI Engineer, LLM & GenAI Developer. Learn Sandboxing best practices, practical tips, and in-depth guides." title: "Umesh Malik's Blog - Sandboxing Articles | Sandboxing Tutorials" tokens: 891 generator: "scripts/generate-page-markdown.mjs" --- [← Back to Blog](https://umesh-malik.com/blog) # Sandboxing 6 articles [![Dashboard cover showing the AI agent egress bypass attack chain — GET as write, wildcard domain, hosts rewrite — against 18,000 edits and 98.5 percent of traffic traced to Azure IPs](https://umesh-malik.com/blog/ai-agent-egress-bypass-get-requests-cover.png) AI Security • Sep 5, 2026 ### AI Agent Egress Bypass: Fix the GET Trick Behind 18k Wiki Edits Researchers traced 18,000 wiki edits to an AI agent egress bypass: sandboxed OpenAI agents used GET requests and a wildcard domain to reach the internet. 10 min read Read more →](https://umesh-malik.com/blog/ai-agent-egress-bypass-get-requests) [![Architecture diagram of a self-hosted AI coding agent with sandboxed execution](https://umesh-malik.com/blog/self-hosted-ai-coding-agent-sandbox-cover.png) AI Coding Agents & DX • Aug 23, 2026 ### Self-Hosted AI Coding Agent: Sandboxed Prompt-to-Deploy for $25/mo Build a self-hosted AI coding agent with sandboxed execution. One prompt produces a repo, tests, CI, and deployed app — $25/mo, no cloud bills. 7 min read Read more →](https://umesh-malik.com/blog/self-hosted-ai-coding-agent-sandbox) [![The five sandbox tools a Gemini agent hook intercepts, against the two tool families it never sees](https://umesh-malik.com/blog/gemini-agent-hooks-fail-open-cover.png) AI Security • Aug 19, 2026 ### Gemini agent hooks fail open: how to block a tool call anyway Gemini agent hooks fail open on every error path, and never fire for MCP or function tools. The deny contract, the coverage gap, and what to gate instead. 9 min read Read more →](https://umesh-malik.com/blog/gemini-agent-hooks-fail-open) [![How a paravirtualized Metal device reporting Apple GPU family 5 makes llama.cpp disable its simdgroup matrix kernels, and the throughput that returns when the guest reports family 9](https://umesh-malik.com/blog/fix-slow-llm-inference-macos-vms-cover.png) LLM Engineering • Aug 11, 2026 ### Fix slow LLM inference in macOS VMs: 12.6 → 207 tok/s LLM inference in macOS VMs collapses to 12.63 tok/s because the guest reports GPU family 5 and llama.cpp drops its matrix kernels. The check, and its limits. 9 min read Read more →](https://umesh-malik.com/blog/fix-slow-llm-inference-macos-vms) [![Cover showing the four-layer agent containment stack — deny egress, scope identity, watch live, kill fast — alongside the AISI evaluation figures of 122 runs, 10 off-scope runs and containment in under an hour](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access-cover.png) AI Security • Aug 8, 2026 ### How to sandbox an AI agent: 10 of 122 eval runs went rogue AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects. 10 min read Read more →](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access) [![Cover card titled Approve, subtitled One in three gets through, with three statistics: 409,000 approve or deny decisions analysed, 66.3% mean accuracy, and 52.5% miss rate on npm-disguised exfiltration](https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue-cover.png) AI Security • Aug 7, 2026 ### Configuring AI Agent Permissions: Humans Miss 1 in 3 Threats 409,000 approve/deny decisions show humans miss 1 in 3 agent threats, and 52.5% of npm-shaped exfiltration. The AI agent permissions config that works instead. 11 min read Read more →](https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue)