Understand this story
Anthropic has open-sourced sandbox-runtime (srt), providing AI agents with container-free OS-level isolation that restricts the files and network hosts processes can access. According to a MarkTechPost report on October 24, 2026, the npm package @anthropic-ai/sandbox-runtime v0.0.81 is licensed under Apache-2.0 and requires Node.js 22.12+; macOS uses Seatbelt, Linux relies on bubblewrap, socat, and ripgrep, and Windows support is in alpha. Network access is denied by default, with traffic allowed through a host-side proxy based on a domain allowlist. Anthropic says permission prompts dropped 84% during internal Claude Code use, a self-reported figure. There are currently no subsequent developments.
AI-generated from public reports
Latest development · Report
Anthropic Open-Sources sandbox-runtime: Providing a Containerless OS-Level Sandbox for AI AgentsDevelopments
1 confirmed developments
Anthropic open-sources OS-level Agent sandbox sandbox-runtime
Source:MarkTechPost
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 24
MarkTechPost
Anthropic Open-Sources sandbox-runtime: Providing a Containerless OS-Level Sandbox for AI Agents
Anthropic has open-sourced sandbox-runtime (srt), which uses OS-level isolation to restrict the files and network hosts that processes can access, without the need to start containers. The npm package @anthropic-ai/sandbox-runtime v0.0.81 is licensed under Apache-2.0 and requires Node.js 22.12+. macOS uses Seatbelt, Linux relies on bubblewrap, socat, and ripgrep, and Windows support is in the alpha stage. Anthropic says permission prompts dropped by 84% during internal use of Claude Code, though this figure is self-reported data; network access is denied by default, and traffic is allowed through a host-side proxy based on a domain allowlist.