Fetching from the wire…
Public story · 2026-07-31 · high
Each agent gets its own Linux user and home directory, cutting the cost of spinning up one sandbox per agent.
Why now: The change is dated July 31 in Vercel's changelog, the day it's covered here.
Vercel now lets multiple agents share one Sandbox instance instead of spinning up a separate sandbox for each one, per the company's changelog. The @vercel/sandbox SDK adds support for multiple Linux users and groups. Each agent gets its own user account and a private home directory instead of one shared filesystem.
That kills a real cost for multi-agent pipelines built on Vercel. Isolating agents by filesystem used to mean paying for a full sandbox per agent, even for lightweight work.
Consolidating into one sandbox cuts both the compute cost and the cold-start delay of spinning up several instances at once.
The isolation isn't total by design. Vercel added a shared group alongside the per-agent users, so agents can pass files to each other on purpose. That's the right call for pipelines where one agent's output feeds directly into the next step.
It surfaced in coverage dated July 31, logged as a changelog entry on Vercel's site.
The isolation is Linux users and groups sharing one kernel, not separate virtual machines. That's a fine tradeoff for agents you control, less so for code you don't trust running in the same sandbox.
Each link below shares sources, entities, or timing with this story.
Announced August 7: Hermes can use AI Gateway as its inference layer for 200+ models with no token markup and per-request dashboard visibility, and execute shell commands inside an isolated Vercel Sandbox microVM instead of on your machine, with Node.js 24/22 and Python 3.13 a...
Vercel shipped Eve, an open-source TypeScript-native agent framework, on June 17 at Ship 26 in London. Every agent is a directory of files that compiles to a durable production service on Vercel Functions: session state persisted and replayed via Vercel Workflow, sandboxed com...
Running untrusted agent code safely has been a persistent headache. Docker adds startup latency and configuration overhead. VMs are heavier. Most developers, myself included, end up running agents with their real credentials on their real filesystem because the friction of san...
Google released Antigravity IDE Extensions, putting its agentic coding platform into VS Code (macOS, Linux, Windows), JetBrains IDEs from 2026.2.1 (IntelliJ, PyCharm, WebStorm, GoLand, CLion, Rider), Zed, and Visual Studio 2026 in preview. One Antigravity account works everywh...
Six clients. One manifest. Zero vendor lock. Vercel published Agent Plugins 1.0.0 on August 6, an openly licensed spec that bundles Agent Skills and MCP servers behind a single portable manifest. The shape is deliberately boring: a plugin.json requiring only schemaVersion and...
Vercel Sandbox is now generally available — isolated Linux microVMs for AI agents via Firecracker with active-CPU pricing. Already powering BlackboxAI, Roocode, and v0. Supports clone/fork/resume via snapshotting. Direct competitor to E2B and Modal for the agent runtime layer.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.