Docker published the Docker Sandbox Kit Specification v3 as open source under Apache 2.0 and said it is bringing the spec to the Cloud Native Computing Foundation for neutral, vendor-independent governance. A Kit is an ordinary OCI image that carries an AI agent, its tools, and a typed list of everything it asks to reach, such as hosts, credentials, and volumes, so the agent’s permissions travel with it and mean the same thing on any conforming runtime. Docker says the format uses an existing OCI extension point rather than forking OCI, works with existing image build, registry, signing, and scanning workflows, and is enforced first by Docker Sandboxes, drawing a parallel to its earlier donation of the image format and the runc runtime that led to the Open Container Initiative.
Docker Brings Sandbox Kit Spec to the CNCF
Docker published the Docker Sandbox Kit Specification v3 as open source under Apache 2.0 and said it is bringing the spec to the Cloud Native Computing Foundation for neutral, vendor-independent governance. A Kit is an ordinary OCI image that carries an AI agent, its tools, and a typed list of everything it asks to reach, such as hosts, credentials, and volumes, so the agent's permissions travel with it and mean the same thing on any conforming runtime. Docker says the format uses an existing OCI extension point rather than forking OCI, works with existing image build, registry, signing, and scanning workflows, and is enforced first by Docker Sandboxes, drawing a parallel to its earlier donation of the image format and the runc runtime that led to the Open Container Initiative.
Source: Docker