AI Agent Workspace Isolation: Start With a Drive Letter

说明与用途

在Windows上，AI代理工作空间的隔离可以从驱动器字母开始，而不是Docker。使用subst将文件夹映射到驱动器字母，将代理指向该驱动器，即可获得基本隔离。无需订阅。

问题

How to isolate an AI agent workspace on Windows without Docker, using a drive letter as the simplest first step.

结果

A simple one-time setup using a drive letter isolates an AI agent workspace on Windows, preventing the agent from accessing anything outside the mapped drive. No subscription required.

工作流

• Map a folder to a drive: use subst for local folders (subst.scsoi.com) or WebDAV/cloud (drive.scsoi.com).
• Point your agent at that drive so it sees one drive and cannot see anything else.
• Upgrade when needed: use Docker or VMs for network isolation, Linux environments, or untrusted code execution.
• For stopping the agent from deleting files, a drive letter is sufficient.

证据

Local folder: subst.scsoi.com

来源

WebDAV/cloud: drive.scsoi.com

来源

Thats it. The agent sees one drive. It cannot see anything else.

来源

For 'stop the agent from deleting my files,' a drive letter is enough.

来源