How Do 15-Minute Auto-Purge Sandboxes Protect Tool Execution?

When autonomous agents execute unverified code, bash commands, or third-party MCP tools in Cloud Pro or Enterprise Swarm, ACR Cloud spawns an isolated micro-container enforced by an unconditional 15-minute shutdown timer (TTL). Upon reaching 15 minutes of inactivity or task completion, the sandbox triggers hardware memory scrubbing and wipes ephemeral storage, leaving zero persistent state.

Sandbox Security Guarantees

• 15-Minute Shutdown Timer: Enforced by kernel shutdown timer (shutdown -h +15) with hardware memory scrubbing.
• ToolHive Micro-Sandboxing: ToolHive isolates untrusted third-party MCP tools in unprivileged user namespaces with locked network egress and ephemeral copy-on-write filesystems.
• Read-Only Root Filesystem: Host directories mounted read-only; disk mutations discarded.
• Zero Model Training: Transcripts and disk traces are never retained or used to train AI models.

Sandbox Configuration Schema

{
  "sandbox": {
    "isolation": "workspace-scoped",
    "timeoutMs": 900000,
    "filesystem": { "mode": "ephemeral-overlay", "maxDiskMb": 512 },
    "network": { "egress": "allowlist", "allowedHosts": ["api.github.com"] }
  }
}