
Rishab Kumar
Rishab is a Staff Developer Evangelist at Twilio, part-time cloud professor at St. Lawrence College, co-founder of Learn to Cloud, GitHub Star, Google Developer Expert and an AWS Community Builder. He is passionate about helping people get into cloud and AI, and sharing his learnings from his time in cloud, DevOps and now DevRel.
rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)
AI Coding Summit NYC
Upcoming
rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

"I panicked instead of thinking. I destroyed months of your work in seconds." That was a Replit agent after wiping a production database during a code freeze.
We’ve entered the "YOLO" era of agentic development. Between July 2025 and early 2026, we saw everything from Claude Code sessions destroying years of student data to supply chain attacks stealing thousands of developer secrets via --dangerously-skip-permissions. Developers are choosing autonomy over security because approving 100 permission prompts an hour isn't a workflow—it’s babysitting.
This talk explores why traditional container isolation fails AI agents and how the Docker Sandbox (sbx) model provides a way out. Attendees will learn the architecture of microVM-based isolation and leave with a concrete pattern for running agents in "Full YOLO Mode" without risking their host machine or production data.
We’ve entered the "YOLO" era of agentic development. Between July 2025 and early 2026, we saw everything from Claude Code sessions destroying years of student data to supply chain attacks stealing thousands of developer secrets via --dangerously-skip-permissions. Developers are choosing autonomy over security because approving 100 permission prompts an hour isn't a workflow—it’s babysitting.
This talk explores why traditional container isolation fails AI agents and how the Docker Sandbox (sbx) model provides a way out. Attendees will learn the architecture of microVM-based isolation and leave with a concrete pattern for running agents in "Full YOLO Mode" without risking their host machine or production data.