Isolation | Forge

Everyone's letting agents drive browsers. We put ours in a box first.

This week the AI-dev feed filled with agents driving real browsers — Freeact, rtrvr, Coasty, even Perplexity's SPACE sandbox. The obvious next question is where you let them do that safely. Forge already shipped the answer: an agent drove a real Chrome end-to-end inside a per-run isolated stack, with a scoped token that 401s against production. Here's what shipped, and why the boundary is the product.

Dmitry Creed

Jul 20, 2026

Bring Your Own Box: Run Forge Agents on Hardware You Control

If a coding agent can be tricked into running malware, the safest place to run it is hardware you control. Forge now lets you bring your own box into the fleet — per-org isolated, zero inbound, one curl to join.

Dmitry Creed

Jun 29, 2026

Relentlessly proactive agents need relentlessly isolated stacks. Here's how Forge does it.

Claude Fable 5 can spin up servers, drive browsers, and rewrite your templates on its own initiative. Simon Willison calls running that unsandboxed 'a top contender for a Challenger disaster.' Forge shipped the answer the same week — isolated stacks with per-run JWT roots, auto-swept orphans, and tenant-level worker isolation. Here's what landed and why.

Dmitry Creed

Jun 14, 2026