Docker open-sources Sandbox Kit Spec, brings agent permissions to CNCF
At WeAreDevelopers, Docker released the Sandbox Kit Spec under Apache 2.0 and is taking it to CNCF. A Kit is an ordinary OCI image that packages an agent, its tools, and a typed list of hosts, credentials, and volumes it may reach—so pinning the image pins the agent and its permission requests together.