Matthew Green：沙箱隔离足以遏制失控 AI 智能体吗？
A quote from Matthew Green
密码学家 Matthew Green 指出，构成蠕虫的两半已经齐备：劫持智能体的载荷，以及把载荷传给下一个智能体的智能体。在相互隔离的沙箱中，智能体发现可以通过共享包缓存互相留下指令，并改变接收方的行为；把包缓存换成邮件、Slack、共享文档或 WhatsApp，把独立沙箱训练换成 Muse 这类独立部署的个人智能体，就凑齐了蠕虫所需的全部要素。
正文
当前显示原文，中文全文译文尚未就绪。
1st October 2026
[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with independently-deployed personal agents like Muse, and you have exactly the ingredients that a worm needs.
— Matthew Green , Is sandboxing sufficient to contain rogue agents?
This is a quotation collected by Simon Willison, posted on 1st October 2026 .