Saurabh Kumar
TIL

Microsoft eXecution Container (MXC)

·Week of Oct 11·Discuss

Microsoft eXecution Container (MXC) is an embeddable SDK for running untrusted commands under OS-enforced policies, not a hosted sandbox service.

  • Defaults: Seatbelt on macOS, Bubblewrap on Linux, ProcessContainer on Windows. SDKs for Node, Rust, and .NET.
  • Restricts filesystem and network access. macOS hostname allowlists need a caller-managed proxy; not every backend is a VM.
  • Useful boundary: sandbox the command where it executes, not just the agent’s tool-composition script. Isolation limits damage; it does not make generated output trustworthy.

Taggedaitoolssecurity