1) Provision a Sandbox
sandbox_id from the response.
2) Verify Connectivity
3) Execute Write Actions (Explicit)
4) Capture Outputs
- Stream output from the execution response
- Store logs and results for audit trails
5) Stop the Sandbox
Step 3 is deliberately explicit: write actions need
--apply, and without it
the agent answers questions and changes nothing. Keep it off while you are
still reading the outputs from step 4 — a read-only rehearsal against real
data is the cheapest way to find out the agent misunderstood the task.Next steps
Run the agent in a sandbox
The narrative version of this runbook.
Sandbox API flow
The underlying create/execute/stop sequence.
Agent sessions
For work that outlives one sandbox.
Troubleshooting
When connectivity or auth fails.