Sandboxed agent

# axl-config/agents/analyst/agent.toml
key = "analyst"
display_name = "Analyst"
description = "Analyzes data files in an isolated workspace"
identity = "Work in the sandbox. Publish results as artifacts, never as workspace paths."
toolsets = ["sandbox-remote", "blob"]

[middleware.blast_radius]
enabled = true
max_writes = 50

Use sandbox-remote for anything autonomous. sandbox-local runs on the host beneath LOCAL_SANDBOX_ROOT and is a development convenience, not an isolation boundary.

A sandbox is temporary, so results a person should keep must be published as artifacts - otherwise they vanish when the workspace is recycled.

Pair it with autonomy:

# intent.toml
[autonomy]
level = "require_approval"

Next

• Choose a sandbox - local versus remote in detail.
• Generated files disappear - the failure this prevents.