DEV Community· 疏影·· 3 小時前AI 評分17
AI Agent 沙盒：以 Windows 磁碟機代號隔離工作區
The AI Agent Sandbox You Already Have: A Drive Letter
AI 導讀
Windows 磁碟機代號可用作 AI Agent 的工作區沙盒，將資料夾映射至代號，再讓 Agent 使用該磁碟機。這種方式無需容器映像，設定簡單，但不取代網絡隔離、依賴項隔離或執行不可信程式碼所需的虛擬機器。
正文
Everyone is building fancy sandboxes for AI agents. But you already have one: a Windows drive letter.
Why it works
- OS-level isolation
- Zero learning curve
- No container images
- Works with every tool
- One-time cost, no subscription
Setup
- Local folder workspace: subst.scsoi.com
- WebDAV/cloud workspace: drive.scsoi.com
Map a folder to a letter. Point your agent at that letter. Done.
The agent can write all day on that drive. It cannot see or touch anything outside it.
Not a replacement for
- Network isolation (use a firewall)
- Dependency isolation (use containers)
- Untrusted code execution (use VMs)
But for "I dont want the agent to delete my project folder," its enough.
來源：DEV Community · dev.to