{"id":58423,"date":"2026-08-14T20:01:36","date_gmt":"2026-08-14T10:01:36","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/"},"modified":"2026-08-14T20:03:00","modified_gmt":"2026-08-14T10:03:00","slug":"why-your-agent-harness-and-sandbox-compute-should-stay-separate","status":"publish","type":"post","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/","title":{"rendered":"Why Your Agent Harness and Sandbox Compute Should Stay Separate"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post <strong>Why Your Agent Harness and Sandbox Compute Should Stay Separate<\/strong>, we will explain why an AI agent\u2019s coordinator should not live inside the same environment where it opens files, installs software and runs generated code.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">At a high level, think of the agent harness as the manager and the sandbox as a locked workshop. The manager decides what work is allowed, checks permissions and records what happened. The workshop is where potentially risky work is performed within defined limits.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Combining them may be convenient during a small trial. In production, however, it can give an error, malicious file or compromised tool a path to the agent\u2019s credentials, instructions and business systems. Separation limits that risk while making the service easier to operate at scale.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What are the agent harness and sandbox compute?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An <strong>agent harness<\/strong> is the software surrounding an AI model such as OpenAI or Anthropic Claude. It manages the overall job, including user requests, model calls, tool selection, approvals, access rules, activity logs and recovery when something fails.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sandbox compute<\/strong> is an isolated computing environment where the agent performs hands-on work. It can read approved files, run commands, analyse spreadsheets, create documents, test code and install temporary software without receiving unrestricted access to your normal IT environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The basic design should look like this:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Business user\n |\n v\nAgent harness\n- Confirms identity\n- Applies company rules\n- Requests approvals\n- Records activity\n |\n | Limited task and temporary access\n v\nSandbox compute\n- Opens working files\n- Runs code and commands\n- Creates results\n- Cannot access unapproved systems\n |\n v\nHarness checks and returns the result<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This builds on the security model discussed in when a business AI agent needs a secure sandbox. The important next step is making sure the system controlling the sandbox is not exposed to everything happening inside it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why putting everything together creates unnecessary risk<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Suppose an AI agent receives a supplier document containing hidden instructions. The instructions attempt to convince the agent to upload files to an external service or retrieve information unrelated to the task.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the harness and sandbox share the same credentials, storage and network access, the agent may be able to reach much further than intended. A document-analysis task could become an entry point to email, cloud storage, source code or customer records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A separate harness can refuse the request because it sits outside the environment processing the untrusted document. The sandbox may be compromised or confused, but it cannot rewrite the organisation\u2019s approval rules or simply grant itself additional access.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Five business reasons to maintain the separation<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. A security incident has a smaller impact<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No sandbox should be treated as perfectly safe. AI-generated code can contain mistakes, uploaded files can be malicious and software packages may include vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keeping the harness separate reduces the potential impact, often called the \u201cblast radius\u201d. The sandbox should receive only the files, tools and temporary permissions required for its current task, rather than permanent credentials for multiple business systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This approach supports the intent of the Essential Eight, the Australian Government\u2019s cybersecurity framework for reducing common security risks. In particular, it reinforces restricted administrative access, application control and stronger monitoring, although architecture alone does not make a business compliant.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Long-running work becomes easier to recover<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Some agents work for minutes. Others may review hundreds of contracts, build a prototype or process a large data room over several hours.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the sandbox crashes, reaches a resource limit or needs to be patched, the entire task should not disappear. A separate harness can retain the job history, approvals and progress record, then reconnect the task to a restored or replacement sandbox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is also why conversation memory and sandbox memory should be managed differently. The business record of what was requested is not the same as temporary files created while completing the work.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Compute costs can follow the actual workload<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The harness is generally lightweight because it coordinates work. A sandbox may need substantial processing power and memory for data analysis, software builds or document conversion.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the layers are separate, the harness can remain available while sandbox compute starts only when required. A simple document task can use a small environment, while a large analysis job can receive more capacity without making every agent session more expensive.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sandboxes can also be paused, deleted or reused according to policy. Our guide to reusing a live sandbox or starting fresh explains how to balance continuity, cost and the risk of stale files or permissions.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Approvals and audit records remain trustworthy<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For a business AI agent, knowing what happened is just as important as receiving the final answer. Leaders may need to establish who started a task, which data was accessed, what tools were used and whether a person approved a sensitive action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Those records are more trustworthy when they are maintained by the harness outside the working environment. The sandbox should report what it did, but it should not be able to alter the master audit trail.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is especially important for Australian organisations handling personal information, financial records, health data or commercially sensitive documents. It provides evidence for internal reviews, customer assurance and incident investigations rather than relying on an AI-generated summary after the event.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. You can replace components without rebuilding everything<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">AI models and computing platforms are changing quickly. A business may use Azure OpenAI for one workflow, Claude for another and different sandbox sizes depending on the job.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A clean boundary allows the model, harness and compute environment to change independently. You can update the sandbox operating system, move a workload or test another model without redesigning identity, approvals and logging from scratch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This reduces technical lock-in and gives CIOs more control over future costs. It also makes pilot projects easier to turn into dependable business services.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical business scenario<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person professional services firm introducing an agent to review tender documents. The agent extracts requirements, compares them with previous submissions and drafts a response for human review.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the combined design, the agent runs beside the orchestration software and has access to shared credentials. A corrupted document, faulty command or software package could affect the entire service and potentially expose other tender folders.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the separated design, the harness confirms the employee\u2019s identity, creates a task and sends only the approved documents to a dedicated sandbox. The sandbox has no general access to Microsoft 365, customer folders or the harness\u2019s service credentials.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When processing finishes, the harness checks the output, stores the audit record and sends the draft to an authorised employee. The sandbox can then be deleted, removing temporary files and reducing ongoing compute costs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The outcome is not merely better technology. The firm receives faster tender analysis, clearer accountability and a much lower chance that one problematic document will affect the wider business.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What a well-separated design should include<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Separate identities:<\/strong> The sandbox should not inherit the harness\u2019s administrative accounts or permanent credentials.<\/li>\n<li><strong>Short-lived access:<\/strong> Permissions should expire when the task finishes and be limited to the specific files or services required.<\/li>\n<li><strong>Network restrictions:<\/strong> The sandbox should communicate only with approved destinations rather than having unrestricted internet access.<\/li>\n<li><strong>Controlled file transfer:<\/strong> Files entering or leaving the sandbox should be scanned, logged and checked against business rules.<\/li>\n<li><strong>Independent logging:<\/strong> Security and approval records should be stored where the sandbox cannot modify or delete them.<\/li>\n<li><strong>Defined lifecycle rules:<\/strong> Decide when environments are created, paused, reused and destroyed.<\/li>\n<li><strong>Human approval points:<\/strong> Actions involving payments, customer communication, production systems or sensitive data should remain subject to human review.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These controls can be implemented using Azure identity and security services, Microsoft Defender, Wiz cloud security and appropriately isolated compute. Microsoft Intune, which manages and secures company devices, can also help protect the employee endpoints used to access agent services.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Do not wait until the pilot becomes production<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The most expensive time to introduce separation is after employees depend on an agent and sensitive data is already flowing through it. Security boundaries, identity rules and logging should be part of the initial design, even when the first use case is small.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc brings more than 20 years of enterprise IT experience to this work as a Microsoft Partner and Wiz Security Integrator. Our Melbourne-based team takes a practical approach across Azure, Microsoft 365, OpenAI, Claude, Defender and Wiz, without turning every AI project into a giant consulting program.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure whether your current AI agent design properly separates decision-making from execution, we are happy to review the architecture and identify the most important risks first \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Keeping an AI agent\u2019s decision-making layer separate from its working environment reduces security risk, controls costs and makes failures easier to contain and recover.<\/p>\n","protected":false},"author":1,"featured_media":58425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_opengraph-title":"Agent Harness and Sandbox Compute Should Stay Separate","_yoast_wpseo_opengraph-description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","_yoast_wpseo_twitter-title":"Agent Harness and Sandbox Compute Should Stay Separate","_yoast_wpseo_twitter-description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[80,121,13,127],"tags":[],"class_list":["post-58423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-agents","category-ai-governance-risk-management","category-blog","category-cloud-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Agent Harness and Sandbox Compute Should Stay Separate<\/title>\n<meta name=\"description\" content=\"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Agent Harness and Sandbox Compute Should Stay Separate\" \/>\n<meta property=\"og:description\" content=\"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/\" \/>\n<meta property=\"og:site_name\" content=\"CPI Consulting\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-14T10:01:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-14T10:03:00+00:00\" \/>\n<meta name=\"author\" content=\"CPI Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Agent Harness and Sandbox Compute Should Stay Separate\" \/>\n<meta name=\"twitter:description\" content=\"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"CPI Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/\"},\"author\":{\"name\":\"CPI Staff\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\"},\"headline\":\"Why Your Agent Harness and Sandbox Compute Should Stay Separate\",\"datePublished\":\"2026-08-14T10:01:36+00:00\",\"dateModified\":\"2026-08-14T10:03:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/\"},\"wordCount\":1394,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png\",\"articleSection\":[\"AI Agents\",\"AI Governance &amp; Risk Management\",\"Blog\",\"Cloud Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/\",\"name\":\"Agent Harness and Sandbox Compute Should Stay Separate\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png\",\"datePublished\":\"2026-08-14T10:01:36+00:00\",\"dateModified\":\"2026-08-14T10:03:00+00:00\",\"description\":\"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#primaryimage\",\"url\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png\",\"width\":1536,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/14\\\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Your Agent Harness and Sandbox Compute Should Stay Separate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"name\":\"Cloud Pro Inc - CPI Consulting Pty Ltd\",\"description\":\"Cloud, AI &amp; Cybersecurity Consulting | Melbourne\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudproinc.com.au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\",\"name\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"width\":500,\"height\":500,\"caption\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\",\"name\":\"CPI Staff\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"caption\":\"CPI Staff\"},\"sameAs\":[\"http:\\\/\\\/www.cloudproinc.com.au\"],\"url\":\"https:\\\/\\\/cloudproinc.azurewebsites.net\\\/index.php\\\/author\\\/cpiadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Agent Harness and Sandbox Compute Should Stay Separate","description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/","og_locale":"en_US","og_type":"article","og_title":"Agent Harness and Sandbox Compute Should Stay Separate","og_description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","og_url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/","og_site_name":"CPI Consulting","article_published_time":"2026-08-14T10:01:36+00:00","article_modified_time":"2026-08-14T10:03:00+00:00","author":"CPI Staff","twitter_card":"summary_large_image","twitter_title":"Agent Harness and Sandbox Compute Should Stay Separate","twitter_description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","twitter_misc":{"Written by":"CPI Staff","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#article","isPartOf":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/"},"author":{"name":"CPI Staff","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e"},"headline":"Why Your Agent Harness and Sandbox Compute Should Stay Separate","datePublished":"2026-08-14T10:01:36+00:00","dateModified":"2026-08-14T10:03:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/"},"wordCount":1394,"commentCount":0,"publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/08\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png","articleSection":["AI Agents","AI Governance &amp; Risk Management","Blog","Cloud Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/","url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/","name":"Agent Harness and Sandbox Compute Should Stay Separate","isPartOf":{"@id":"https:\/\/cloudproinc.com.au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/08\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png","datePublished":"2026-08-14T10:01:36+00:00","dateModified":"2026-08-14T10:03:00+00:00","description":"Learn why your agent harness should stay separate from sandbox compute to limit security risk, protect audit records and improve recovery and cost control.","breadcrumb":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#primaryimage","url":"\/wp-content\/uploads\/2026\/08\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png","contentUrl":"\/wp-content\/uploads\/2026\/08\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png","width":1536,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/14\/why-your-agent-harness-and-sandbox-compute-should-stay-separate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudproinc.com.au\/"},{"@type":"ListItem","position":2,"name":"Why Your Agent Harness and Sandbox Compute Should Stay Separate"}]},{"@type":"WebSite","@id":"https:\/\/cloudproinc.com.au\/#website","url":"https:\/\/cloudproinc.com.au\/","name":"Cloud Pro Inc - CPI Consulting Pty Ltd","description":"Cloud, AI &amp; Cybersecurity Consulting | Melbourne","publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudproinc.com.au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cloudproinc.com.au\/#organization","name":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd","url":"https:\/\/cloudproinc.com.au\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/","url":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","contentUrl":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","width":500,"height":500,"caption":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd"},"image":{"@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e","name":"CPI Staff","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","caption":"CPI Staff"},"sameAs":["http:\/\/www.cloudproinc.com.au"],"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/author\/cpiadmin\/"}]}},"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/08\/why-your-agent-harness-and-sandbox-compute-should-stay-separate.png","_links":{"self":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/comments?post=58423"}],"version-history":[{"count":1,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58423\/revisions"}],"predecessor-version":[{"id":58424,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58423\/revisions\/58424"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/media\/58425"}],"wp:attachment":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/media?parent=58423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/categories?post=58423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/tags?post=58423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}