The AI Agent Sandbox You Already Have: A Drive Letter

Описание и применение

Использование буквы диска Windows как изолированной среды для AI‑агентов обеспечивает простую и бесплатную защиту от доступа к файлам вне рабочей папки.

Задача

Prevent an AI agent from accessing or modifying files outside a designated workspace while keeping setup simple.

Результат

Using a drive letter as a sandbox provides OS-level isolation without containers, learning curve, or subscription costs, suitable for simple protection needs.

Рабочий процесс

• Map a local or cloud folder to a drive letter using Windows subst or WebDAV.
• Configure the AI agent to use the mapped drive letter as its working directory.
• Run the agent; it can read/write only within that drive.
• Verify that the agent cannot access files outside the mapped drive.
• Optional: add firewall or container layers for stronger isolation.

Доказательства

Everyone is building fancy sandboxes for AI agents. But you already have one: a Windows drive letter.

Источник

OS-level isolation

Источник

Map a folder to a letter. Point your agent at that letter. Done.

Источник

The agent can write all day on that drive. It cannot see or touch anything outside it.

Источник