AWS open-sources Strands Box for policy-bound agent execution
AWS released Strands Box in developer preview under Apache 2.0. It combines OS containment with deny-by-default Dogwood policy across shell, Python, HTTP egress and MCP calls, injects credentials outside the agent process and records policy decisions for inspection.
Why it matters: Box moves important agent controls outside the model and harness, allowing rules to depend on action history and elapsed time. It offers a concrete way to test cross-tool exfiltration and rate limits instead of trusting the agent to enforce its own…