https://securityarchitects.com/tags/sandbox/ Recent content in Sandbox on Security Architects Hugo en-us Fri, 02 Oct 2026 12:00:00 -0700 https://securityarchitects.com/post/eight-components-or-eighty-lines/ Fri, 02 Oct 2026 12:00:00 -0700 https://securityarchitects.com/post/eight-components-or-eighty-lines/ <p>A reader asked how our agent sandbox and secrets scheme compare to <a href="https://github.com/onecli/onecli">OneCLI</a>, an open-source platform for running AI agents as a team. Fair question, and the answer is more interesting than &ldquo;ours is better&rdquo;, because on one axis theirs is, and checking the comparison turned up a sentence on our own product page that was not true.</p> <h2 id="what-onecli-is">What OneCLI is</h2> <p>A team control plane. One sandboxed agent per employee, provisioned from your identity provider, under a team policy, with shared connections, memory, scheduling, and a Slack identity each. It runs on your infrastructure. The runner is outbound-only with no inbound ports, which is the same idea our tunnel client uses to live behind NAT.</p>