Docker's released cloud sandboxes run each agent workload in its own cloud microVM with per-second billing under a new Agentic Platform, marking the container-tooling incumbent's entry into hosted agent execution; sustained adoption by agent builders would establish incumbent container platforms as a default execution substrate for deployed agents.

state: corroboratedheat: mediumuncertainty: mediumconvergesscott: highagent-sandboxes ai-infrastructure docker agent-orchestrationDocker

What is this?

Docker launched Cloud Sandboxes on Sept 24, 2026: a hosted version of its local sandbox product in which each agent workload runs in its own microVM with a dedicated kernel on Docker-managed compute, billed pay-as-you-go, driven by the same `sbx` CLI as local sandboxes — pitched as 'start on your laptop, finish in the cloud' for long-running coding agents (Claude Code, Codex, Copilot) that keep working after the developer's machine sleeps. It sits under a broader Agentic Platform push that also includes an open-source Go agent harness ('docker-agent'). The snippets corroborate the launch, the local/cloud microVM symmetry, capacity up to 16 vCPUs, and a partner integration quote from Warp hosted on Docker's product page; they offer no independent adoption, scale, or pricing-competitiveness evidence, so traction still rests mainly on Docker's own material.

Why it matters to Scott

Converges: the container incumbent whose shared-daemon socket Scott's own pages treat as the canonical agent-containment hazard now sells the exact microVM-per-agent, dedicated-kernel isolation his SiloOS/padded-cell canon prescribes — a dated incumbent receipt for his 'architecture, not vibes' position and a managed alternative to the LXD/Bubblewrap isolation he rolls himself, with the docker-agent harness landing secondarily on his harness-design turf. Relevance is high even without adoption evidence: Docker entering makes structural containment a default-purchasable substrate, which changes what he can recommend to LeverageAI clients and what he deploys for his own untrusted-agent factories.

ip:framework.siloosdev:project.silo-osip:concept.sandboxed-executiondev:technology.dockerip:source.ai-doesnt-fear-deathradar:docker-ai-agent-sandboxesradar:concept.agent-sandboxingradar:concept.agent-containmentradar:concept.dockerradar:concept.microvmsradar:fly-agent-computers-infrastructure

queries asked of Scott's wikis

agent sandbox microVM isolation containment position
Docker socket agent security hazard
coding agent harness design implementation notes
long-running agent autonomy guardrails safety
local to cloud agent execution handoff workflow
agent compute cost per-second sandbox economics

Measured heat

now 0 pts/hpeak 39 pts/hcomments 0/hpeers p14momentum: steady2 platformsage 482h

points/hour across evidence · reading as of 2026-10-12 02:59:37.977291+11:00 · deterministic, not a model opinion

How the heat travelled

09-21 14:00	⭐ origin echo-reconstructed	Docker promotes its Sandboxes / Agentic Platform: "Each sandbox is a microVM with its own kernel, running in the cloud. Your agents keep wor Docker on blog (echo) · attributed from hn.story.49837567	—
09-24 22:24	first on hacker news · published · +80.4h	Docker releases cloud sandboxes, enabling safe agentic workloads in the cloud pheonixblade9	—
09-24 22:24	amplified on hacker news	hn.story.49837567 pheonixblade9	peak 32 · 7 comments · 8% of case engagement
10-07 17:48	amplified on hacker news 👑	hn.story.49996259 saikatsg	peak 304 · 145 comments · 92% of case engagement
09-25 03:21	our radar first saw it · +85.3h	discovery anchor: hn.story.49837567	—

pace: p59 vs 1032 stories at the 336h mark (now 482h old) — ahead of opencontext-project-local-agent-memory (1.0x), behind devin-code-scans (1.0x)

Evidence (3) — ⭐ canonical anchor

source	object	author	score	comments
🟧 hn	Docker releases cloud sandboxes, enabling safe agentic workloads in the cloud Retrieved article excerpt Open article · Retrieved 2026-09-25T03:25:51.934247+00:00 docker wad 26 # Claim your $250 Cloud Sandbox Credit Each sandbox is a microVM with its own kernel, running in the cloud. Your agents keep working after you close your laptop. [Claim my $250 credit](https://agentic-platform.docker.com/?_gl=11r5fqv3_gcl_awR0NMLjE3ODkwNzIyNzQuQ2p3S0NBandxb25WQmhBNEVpd0E5d1lKM1p6RzdHbVZsZ1I5WHdWSU84REFRek9IZWZiZjlDQzlGMzEzYkVzUm9vNUYtSVN2TVRNTGNCb0M4UjBRQXZEX0J3RQ.._gcl_auODc3Nzk3MjI5LjE3ODUxODg1ODM._gaMTk1NjE0NDE4NS4xNzc3NDA1MTA4_ga_XJWPQMJYHQczE3ODk2ODcxNjkkbzUyMCRnMSR0MTc4OTY4ODU0NiRqNjAkbDAkaDA.) Get $250 in compute credit when you sign up for Docker Agentic Platform, September 22-26, 2026. Credit card required at signup. [Terms Apply](https://www.docker.com/c/sbx-promo/#FAQ). Docker Sandboxes ## Offer expires in 00 Days 00 Hours 00 Minutes 00 Seconds # $250 goes a long way For example, it can run: ### Four agents in parallel Seven hours a day, thirty days ### Or about 3,500 short runs Automated tasks of fifteen minutes each Priced at Medium: 4 vCPU, 8 GB, $0.280 an hour. [See how pricing is structured](https://www.docker.com/c/sbx-promo/#how-is-pricing-structured) ## Close your laptop. The work keeps going. Start an agent in a sandbox, walk away, come back to a finished branch. [Learn more](https://www.docker.com/products/docker-sandboxes/) ### Run it in the background The sandbox runs in the cloud. Nothing depends on your laptop staying awake. ### Run several at once Each agent gets its own sandbox. They install and test without touching each other’s files. ### Let the agent install anything Each microVM has its own kernel. Whatever the agent installs, stays inside. ## Common questions Learn more about our limited-time offer for Cloud Sandbox compute credits. ### What are the offer terms? New Docker Agentic Platform signups receive a one-time $250 compute credit in lieu of the standard $25 credit. Limit one per user and account. Valid credit card required at signup; the card will be charged only for usage beyond the credit. Offer valid September 22–26, 2026, 11:59 PM PT. Credits are non-transferable, have no cash value, and expire 6 months after redemption. Subject to these offer terms and Docker’s SSA. Docker may modify or end this offer at any time. Void where prohibited. Terms apply: [Terms of Usage](https://www.docker.com/legal/docker-terms-use/?at_exp=DO105.A-DO106.A) \| [Privacy Policy](https://www.docker.com/legal/privacy/?at_exp=DO105.A-DO106.A) ### How is pricing structured? Sandboxes bill by the second for compute, from start to stop. Your $250 credit is drawn down first; your card is charged only for usage beyond it. Sizes and rates: \| SIZE \| VCPU \| MEMORY \| PER HOUR \| $250 BUYS \| \| --- \| --- \| --- \| --- \| --- \| \| Micro \| 1 \| 2GB \| $0.070 \| ~3,570 hrs \| \| Small \| 2 \| 4 GB \| $0.140 \| ~1,785 hrs \| \| Medium \| 4 \| 8 GB \| $0.280 \| ~890 hrs \| \| Large \| 8 \| 16 GB \| $0.560 \| ~445 hrs \| \| XL \| 16 \| 32 GB \| $1.118 \| ~225 hrs \| ### When does the credit expire? Six months after you claim it. Anything unused at that point is forfeited, and you are never charged for it. ### What counts against the credit? Sandbox compute only, measured from start to stop. Setup, idle time, and retries all count. Model API usage and agent subscriptions are billed separately by their providers. ### Who can claim it? Anyone who signs up between September 23–25, 2026, one credit per account. Terms and conditions apply. ## Set your agents to YOLO mode [Claim my $250 credit](https://agentic-platform.docker.com/?_gl=11r5fqv3_gcl_awR0NMLjE3ODkwNzIyNzQuQ2p3S0NBandxb25WQmhBNEVpd0E5d1lKM1p6RzdHbVZsZ1I5WHdWSU84REFRek9IZWZiZjlDQzlGMzEzYkVzUm9vNUYtSVN2TVRNTGNCb0M4UjBRQXZEX0J3RQ.._gcl_auODc3Nzk3MjI5LjE3ODUxODg1ODM._gaMTk1NjE0NDE4NS4xNzc3NDA1MTA4_ga_XJWPQMJYHQczE3ODk2ODcxNjkkbzUyMCRnMSR0MTc4OTY4ODU0NiRqNjAkbDAkaDA.) [Learn more](https://www.docker.com/products/docker-sandboxes/) Estimates cover sandbox compute only. Model API usage and agent subscriptions are billed separately. Hours per day are assumed workloads, not limits. Billed time includes setup, idle time, and retries. Rates current as of September 2026.	pheonixblade9	32	7
🟧 echo.blog ⭐	Docker promotes its Sandboxes / Agentic Platform: "Each sandbox is a microVM with its own kernel, running in the cloud. Your agents keep wor	Docker	—	—
🟧 hn	Docker Agent	saikatsg	304	145

source

object

author

score

comments

🟧 hn

Docker releases cloud sandboxes, enabling safe agentic workloads in the cloud

Retrieved article excerpt

Open article · Retrieved 2026-09-25T03:25:51.934247+00:00

docker wad 26

# Claim your $250 Cloud Sandbox Credit

Each sandbox is a microVM with its own kernel, running in the cloud. Your agents keep working after you close your laptop.

[Claim my $250 credit](https://agentic-platform.docker.com/?_gl=1*1r5fqv3*_gcl_aw*R0NMLjE3ODkwNzIyNzQuQ2p3S0NBandxb25WQmhBNEVpd0E5d1lKM1p6RzdHbVZsZ1I5WHdWSU84REFRek9IZWZiZjlDQzlGMzEzYkVzUm9vNUYtSVN2TVRNTGNCb0M4UjBRQXZEX0J3RQ..*_gcl_au*ODc3Nzk3MjI5LjE3ODUxODg1ODM.*_ga*MTk1NjE0NDE4NS4xNzc3NDA1MTA4*_ga_XJWPQMJYHQ*czE3ODk2ODcxNjkkbzUyMCRnMSR0MTc4OTY4ODU0NiRqNjAkbDAkaDA.)

Get $250 in compute credit when you sign up for Docker Agentic Platform, September 22-26, 2026. Credit card required at signup. [Terms Apply](https://www.docker.com/c/sbx-promo/#FAQ).

Docker Sandboxes

## Offer expires in

00
Days

00
Hours

00
Minutes

00
Seconds

# $250 goes a long way

For example, it can run:

### Four agents in parallel

Seven hours a day, thirty days

### Or about 3,500 short runs

Automated tasks of fifteen minutes each

Priced at Medium: 4 vCPU, 8 GB, $0.280 an hour.  
[See how pricing is structured](https://www.docker.com/c/sbx-promo/#how-is-pricing-structured)

## Close your laptop. The work keeps going.

Start an agent in a sandbox, walk away, come back to a finished branch.

[Learn more](https://www.docker.com/products/docker-sandboxes/)

### Run it in the background

The sandbox runs in the cloud. Nothing depends on your laptop staying awake.

### Run several at once

Each agent gets its own sandbox. They install and test without touching each other’s files.

### Let the agent install anything

Each microVM has its own kernel. Whatever the agent installs, stays inside.

## Common questions

Learn more about our limited-time offer for Cloud Sandbox compute credits.

### What are the offer terms?

New Docker Agentic Platform signups receive a one-time $250 compute credit in lieu of the standard $25 credit. Limit one per user and account. Valid credit card required at signup; the card will be charged only for usage beyond the credit. Offer valid September 22–26, 2026, 11:59 PM PT. Credits are non-transferable, have no cash value, and expire 6 months after redemption. Subject to these offer terms and Docker’s SSA. Docker may modify or end this offer at any time. Void where prohibited. Terms apply: [Terms of Usage](https://www.docker.com/legal/docker-terms-use/?at_exp=DO105.A-DO106.A) | [Privacy Policy](https://www.docker.com/legal/privacy/?at_exp=DO105.A-DO106.A)

### How is pricing structured?

Sandboxes bill by the second for compute, from start to stop. Your $250 credit is drawn down first; your card is charged only for usage beyond it. Sizes and rates:

| SIZE | VCPU | MEMORY | PER HOUR | $250 BUYS |
| --- | --- | --- | --- | --- |
| Micro | 1 | 2GB | $0.070 | ~3,570 hrs |
| Small | 2 | 4 GB | $0.140 | ~1,785 hrs |
| Medium | 4 | 8 GB | $0.280 | ~890 hrs |
| Large | 8 | 16 GB | $0.560 | ~445 hrs |
| XL | 16 | 32 GB | $1.118 | ~225 hrs |

### When does the credit expire?

Six months after you claim it. Anything unused at that point is forfeited, and you are never charged for it.

### What counts against the credit?

Sandbox compute only, measured from start to stop. Setup, idle time, and retries all count. Model API usage and agent subscriptions are billed separately by their providers.

### Who can claim it?

Anyone who signs up between September 23–25, 2026, one credit per account. Terms and conditions apply.

## Set your agents to YOLO mode

[Claim my $250 credit](https://agentic-platform.docker.com/?_gl=1*1r5fqv3*_gcl_aw*R0NMLjE3ODkwNzIyNzQuQ2p3S0NBandxb25WQmhBNEVpd0E5d1lKM1p6RzdHbVZsZ1I5WHdWSU84REFRek9IZWZiZjlDQzlGMzEzYkVzUm9vNUYtSVN2TVRNTGNCb0M4UjBRQXZEX0J3RQ..*_gcl_au*ODc3Nzk3MjI5LjE3ODUxODg1ODM.*_ga*MTk1NjE0NDE4NS4xNzc3NDA1MTA4*_ga_XJWPQMJYHQ*czE3ODk2ODcxNjkkbzUyMCRnMSR0MTc4OTY4ODU0NiRqNjAkbDAkaDA.)
[Learn more](https://www.docker.com/products/docker-sandboxes/)

Estimates cover sandbox compute only. Model API usage and agent subscriptions are billed separately. Hours per day are assumed workloads, not limits. Billed time includes setup, idle time, and retries. Rates current as of September 2026.

pheonixblade9

🟧 echo.blog ⭐

Docker promotes its Sandboxes / Agentic Platform: "Each sandbox is a microVM with its own kernel, running in the cloud. Your agents keep wor

Docker

—

🟧 hn

Docker Agent

saikatsg

304

145

Interpretation history

2026-10-11T08:13:59Z
The docker-agent OSS harness continues accumulating HN engagement (304/145, multiple velocity spikes above cohort p90) and magnitude_valve_eligible confirms cross-platform spread, but this remains discussion on the harness — not adoption evidence for the cloud sandboxes themselves. The sandbox launch (32/7 on HN) is quiet. Topic neighborhood is hot (ai-infrastructure, agent-orchestration) and Docker is a rooted actor, so medium heat holds; no new facts move the substrate-adoption hypothesis forward.
2026-10-07T21:17:48Z
grounded: converges/high — Converges: the container incumbent whose shared-daemon socket Scott's own pages treat as the canonical agent-containment hazard now sells the exact microVM-per-
2026-10-07T21:08:12Z
The docker-agent OSS harness (83/29 on HN, docs wired into sandbox configuration) upgrades this from a one-off sandbox launch to a sustained, multi-product Agentic Platform entry by Docker — the incumbent-entry fact is now corroborated by shipping product plus a second artifact, not just a press release. But HN reception is skeptical about Docker's fit and there is still zero adoption evidence for the sandboxes themselves, so the hypothesis's forward half stays the open test.
2026-10-07T20:34:06Z
evidence attached: hn.story.49996259 — Docker shipping an open-source docker-agent with real traction (83/29) is material first-party evidence of the incumbent's broadening agent-platform push beyond cloud sandboxes.
2026-09-25T03:33:42Z
grounded: converges/high — Docker — the company whose shared-daemon socket is the canonical agent-containment hazard — selling a microVM-per-agent cloud sandbox is an incumbent concession
2026-09-25T03:26:48Z
case created — First-party Docker announcement of a microVM-per-agent cloud sandbox service with per-second billing is a concrete incumbent entry into hosted agent-execution infrastructure, with no existing open case covering it.

Decision trace

10-11 19:14repriceThe docker-agent OSS harness continues accumulating HN engagement (304/145, multiple velocity spikes above cohort p90) and magnitude_valve_eligible confirms cross-platform spread, but this remains dis
10-09 04:35sensor_dirtyvelocity_spike
10-08 21:34sensor_dirtyvelocity_spike
10-08 19:31sensor_dirtycomment_update
10-08 18:04attention_routeThe editor compared this story and chose to keep watching.
10-08 15:29sensor_dirtyvelocity_spike
10-08 12:22attention_routeQuiet hours hold until the 10:00 Sydney briefing (~100 minutes out); the only new fact since this item was queued — the docker-agent harness — broadens the platform story without changing the substrat
10-08 11:21sensor_dirtycomment_update
10-08 09:21sensor_dirtyvelocity_spike
10-08 09:21sensor_dirtycomment_update
10-08 08:21attention_routeQuiet hours hold until the 10:00 Sydney briefing (~100 minutes out); the only new fact since this item was queued — the docker-agent harness — broadens the platform story without changing the substrat
10-08 08:17attention_candidatematerial_reprice
10-08 08:17repriceThe docker-agent OSS harness (83/29 on HN, docs wired into sandbox configuration) upgrades this from a one-off sandbox launch to a sustained, multi-product Agentic Platform entry by Docker — the incum
10-08 08:17groundConverges: the container incumbent whose shared-daemon socket Scott's own pages treat as the canonical agent-containment hazard now sells the exact microVM-per-agent, dedicated-kernel isolation h
10-08 08:08review_reactivatedThe docker-agent OSS harness (83/29 on HN, docs wired into sandbox configuration) upgrades this from a one-off sandbox launch to a sustained, multi-product Agentic Platform entry by Docker — the incum
10-08 07:40attention_routeIt bears directly on the substrate choice for deployed agents and feeds the containment and value-migration arguments with a dated incumbent receipt; pricing and product shape are first-party and stab
10-08 07:34attention_candidateattach
10-08 07:34attachDocker shipping an open-source docker-agent with real traction (83/29) is material first-party evidence of the incumbent's broadening agent-platform push beyond cloud sandboxes.
10-08 07:24propose_attachDocker shipping an open-source docker-agent with real traction (83/29) is material first-party evidence of the incumbent's broadening agent-platform push beyond cloud sandboxes.
10-06 21:42review_dormantscheduled targets exhausted or 28 quiet days
10-06 21:42drop_targetsquiet through full ladder or over cap 8
09-26 11:41review_screenjev screen: no material development (noul=0.11)
09-25 13:33groundDocker — the company whose shared-daemon socket is the canonical agent-containment hazard — selling a microVM-per-agent cloud sandbox is an incumbent concession that shared-kernel container isolation
09-25 13:26createFirst-party Docker announcement of a microVM-per-agent cloud sandbox service with per-second billing is a concrete incumbent entry into hosted agent-execution infrastructure, with no existing open cas