Why AI Agent Sandboxes Should Start With a Drive Letter

Every AI agent sandbox tutorial starts with Docker, VMs, or remote containers. But most people dont need that.

Start simple

A drive letter is the minimal viable sandbox:

• The agent sees one drive
• It cannot see anything else
• Windows enforces the boundary
• Every tool works with it

When to upgrade

Upgrade to Docker/VMs when you need:

• Network isolation
• OS-level isolation
• Untrusted code execution

For "stop the agent from deleting my files," a drive letter is enough.

Tools

• Local folders: subst.scsoi.com
• WebDAV/cloud: drive.scsoi.com

Both one-time purchases. Start with the simplest thing that works.