Docker Sandbox Kit Spec: Packaging AI Agent Permissions as OCI Images

Docker has submitted its Sandbox Kit Specification to the Cloud Native Computing Foundation to standardize how AI agent permissions are managed. By packaging security constraints and access policies as OCI images, the proposal aims to make environment isolation portable across different infrastructure providers. This approach seeks to ensure that AI agents maintain consistent security boundaries regardless of where they are executed.