Your AI Coding Agent Can't Steal What It Never Had: The Docker Sandbox Isolation Story (opens in new tab)

I ran an AI coding agent against a broken Kubernetes deployment for five minutes. The agent called Anthropic's API dozens of times — reasoning about manifests, running kubectl commands, redeploying workloads. It made fully authenticated requests throughout the entire session. The API key was never in its environment.