Tracekit Box: Running AI Agents in Micro-VMs Where Every Way Out Is Decided and Signed
arXiv:2610.38458v1 Announce Type: cross Abstract: AI agents now install packages, call model APIs with their operators' keys and change code in repositories that deploy to production. The network, credentials and write access they need are also how they can leak data, steal a key or change a system nobody approved. Sandboxes contain an agent but leave little evidence of what crossed their boundary; tracing records what happened but contains nothing. We present Tracekit Box, an open-source syste…