Sandboxing an AI agent doesn't have to be complicated.
Here's the 10-second setup:
Step 1: Create a folder
mkdir C:i-workspaces ask-1
Step 2: Map it to a drive
subst Z: C:i-workspaces ask-1
Step 3: Point the AI agent at it
Open Cursor / Claude Code / whatever tool you use, and point it at Z:\.
That's it. Done.
Why this works
Because it's an OS-level boundary. The filesystem enforces it, not the AI.
The agent can do whatever it wants inside that drive. It can't see anything outside of it.
The tool I use
The built-in subst command works, but mappings disappear when you reboot. I use ScsSubst (https://subst.scsoi.com/) to make them persistent. $9.99 lifetime, one-time purchase.
Compare to other setups
- VM: 30 minutes to set up
- Docker: 15 minutes to set up
- Mapped drive: 10 seconds to set up
Same guarantee. 100x faster setup.
The bottom line
AI agent sandboxing doesn't have to be complicated. It's just a drive letter.
Spend 10 seconds setting it up. Save yourself hours of cleanup later.
Top comments (0)