Everyone is building fancy sandboxes for AI agents. But you already have one: a Windows drive letter.
Why it works
- OS-level isolation
- Zero learning curve
- No container images
- Works with every tool
- One-time cost, no subscription
Setup
- Local folder workspace: subst.scsoi.com
- WebDAV/cloud workspace: drive.scsoi.com
Map a folder to a letter. Point your agent at that letter. Done.
The agent can write all day on that drive. It cannot see or touch anything outside it.
Not a replacement for
- Network isolation (use a firewall)
- Dependency isolation (use containers)
- Untrusted code execution (use VMs)
But for "I dont want the agent to delete my project folder," its enough.
