Microsoft makes agent sandboxing standard on Windows and launches a $2,599 local-AI laptop
The MXC section explains a concrete way to keep agents from doing more than they were asked.
At an October 7 event with Nvidia, Microsoft announced general availability of Microsoft Execution Containers (MXC), which let developers set file and network access rules for AI agents that are enforced outside the model, so agents can't raise their own privileges. Microsoft says GitHub Copilot, OpenAI Codex, LM Studio and Replit are adopting it. It also opened preorders for the Nvidia-powered Surface Laptop Ultra, from $2,599 and shipping October 16; Microsoft says it can run models over 120 billion parameters locally (a company claim).
-
Sandbox (computer security)
After exploring Surface Laptop Ultra Preorders Open From $2,599, the older idea behind it is Sandbox (computer security).
A sandbox separates running programs so failures and vulnerabilities can't spread, giving untrusted code a tightly controlled set of resources. The metaphor is a child's sandbox: a place to experiment without real-world damage.
Wikipedia · Wade · 5 min
0 -
Principle of least privilege
After exploring Surface Laptop Ultra Preorders Open From $2,599, the rule it tries to enforce is Principle of least privilege.
The principle that every part of a system should be able to access only the information and resources it needs for its legitimate purpose, and nothing more.
Wikipedia · Wade · 5 min
0