The AI Agent Sandbox You Already Have: A Drive Letter

Everyone is building fancy sandboxes for AI agents. But you already have one: a Windows drive letter.

Why it works

• OS-level isolation
• Zero learning curve
• No container images
• Works with every tool
• One-time cost, no subscription

Setup

• Local folder workspace: subst.scsoi.com
• WebDAV/cloud workspace: drive.scsoi.com

Map a folder to a letter. Point your agent at that letter. Done.

The agent can write all day on that drive. It cannot see or touch anything outside it.

Not a replacement for

• Network isolation (use a firewall)
• Dependency isolation (use containers)
• Untrusted code execution (use VMs)

But for "I dont want the agent to delete my project folder," its enough.