Strands Box

Strands Box is an open-source sandbox for AI agents released by the AWS Strands team in developer preview. It uses operating-system isolation to restrict direct access and the Dogwood policy engine to allow or deny actions observed through its shell and Python interpreters, network gateway and MCP broker. Rules can take earlier actions into account, such as blocking an outbound request after a sensitive file has been read. The gateway can inject credentials for approved requests while keeping the underlying secret outside the agent process. The README says local support currently covers Apple-silicon Macs. Direct file grants are enforced by the operating system but are not recorded in Dogwood’s policy history, an important limit when designing rules.