Docker submits Sandbox Kit spec to CNCF, packaging agent permissions as OCI images

On October 2, 2026, InfoQ reported that Docker has announced it is bringing the Sandbox Kit Specification to the CNCF. The report, credited to Claudio Masolo, describes the move as an effort to make what an AI agent may access as portable as the agent itself.

The mechanism Docker puts forward, according to the report, is to package agent permissions into OCI images. That framing places permission definitions in the same distribution format already used for container images, so that the boundaries of what an agent can reach travel alongside the agent rather than being redefined for each environment. The specification carries the name Sandbox Kit Specification, and the body it has been submitted to is the CNCF.

That is where the available reporting ends. The report does not say when the submission was made beyond the October 2 announcement date, does not list co-authors or supporting vendors, and does not include a response from the CNCF. It also does not describe how permissions are encoded inside the image, which OCI fields are involved, or what tooling would consume the specification.

So as it stands, the confirmed facts are limited: Docker announced on October 2, 2026 that the Sandbox Kit Specification is being brought to the CNCF, with the stated aim of making an AI agent's access permissions as portable as the agent itself by packaging those permissions as OCI images. No further step — review, acceptance, or adoption — appears in the reporting available so far.