docker/sandbox-kit-spec

Docker Sandbox Kit v3 specification, defining Kit descriptor syntax, OCI artifacts and building front ends. It aims to provide a sandbox environment for AI agents, solve the contradiction between container isolation and permission granting through kernel-level mandatory boundaries, and ensure that agents run in a secure and restricted environment.