Buddy Sandboxes Give Agents Isolated VMs

The real differentiator is persistence: agents get realistic, reusable machines instead of disposable containers or risky access to a developer’s laptop.

• –Persistent disks retain dependencies, files, configurations, and build caches between sessions
• –Snapshots and roughly 70 ms startup times make parallel task, branch, and pull-request environments practical
• –Root access, Docker, background services, and public URLs support much broader workflows than basic code-execution sandboxes
• –MCP integration lets agents create machines, run commands, inspect logs, manage apps, and tear environments down autonomously
• –The tradeoff is operational and security responsibility: giving agents full Linux machines demands careful permissions, secrets management, and lifecycle controls