Atomic Sandboxing: Building a Closed-by-Default Network Gate for Agent Code Execution in Go (#03)
Compute isolation protects the host kernel, but an LLM agent with uncontrolled outbound access still exposes your cloud metadata, peer containers, and VPC to SSRF attacks. When standard Docker network hot-plugging fails inside gVisor, how do you prevent egress leaks before code executes? Here is the architecture and Go implementation of an egress gate that closes by default and releases access in a single atomic transaction.