In Person-Salem: Making AI faster and safer with Docker by Michael Irwin

While most coding agents have "sandboxes" and "permissions", did you know that they are easily bypassed? And it's rare that a day goes by without hearing how Claude or Codex or Copilot or \ has leaked credentials or deleted a filesystem. So, how do we fix this?

In this talk, we'll talk about the various ways in which things can go wrong and how Docker's been building tooling to combat these issues. At the end of the day, Docker wants to help developers get the full power of agents, but provide the proper guardrails and observability.

We'll dive into Docker Sandboxes, the MCP Toolkit, and get a sneak peek of upcoming features. There will be lots of demos (both good and bad!) of blocking various attacks, ranging from filesystem deletion, to API token leaks, and various prompt injections. It should be a lot of fun!

Pizza and soft drinks will be provided.