AI agent workspace isolation doesnt have to be complicated. Sometimes the simplest solution is the best.
The drive letter approach
Map a folder to a drive letter. That drive is the agents entire world.
Why it works
- Windows enforces the boundary
- Every tool understands drive letters
- No container runtime needed
- Instant startup
Tools
- Local folders: subst.scsoi.com
- WebDAV/cloud: drive.scsoi.com
Both are one-time purchases. No subscription.
When to upgrade
Move to Docker/VMs when you need:
- Network isolation
- Linux environments
- Untrusted code execution
For most people, a drive letter is enough. Start there.
Top comments (0)