Marktechpost flags a genuinely useful release: Perplexity putting its production agent sandbox on GitHub under Apache 2.0 is one of the more practical open-source moves in the agent stack this cycle. Per-task Firecracker microVMs with egress and credential control outside the VM attack the real failure mode of browsing and coding agents — prompt injection escalating into credential theft. E2B and Docker-based sandboxes already fill this niche, but a production-tested implementation from a team running it at scale raises the bar for everyone. The likely consequence: agent isolation becomes commodity infrastructure fast, and differentiation shifts to orchestration and UX. Worth watching whether other agent vendors follow and open their own sandboxes — the era of running agents loose on the host is ending.