Docker hands the CNCF an open format for governing AI agent permissions

On September 24, 2026, Docker published the Sandbox Kit Specification v3 under Apache 2.0 and moved it under CNCF governance: a Kit becomes an ordinary OCI image carrying the agent, its tools and the typed list of what it may reach. Teams running coding agents should adopt the model to turn implicit grants into a versioned, reviewable artifact.