MXC Internals: How Microsoft's eXecution Containers Actually Isolate Agent Code

2026-06-09

At Build 2026, Microsoft announced MXC as a new, platform-agnostic sandbox system for running untrusted and agentic code. The sandbox runs at the OS level rather than at the application level, unlike those shipped with Codex or Claude Code. Based on the OS and available features, the sandbox will run a backend using either AppContainer, Windows.AI.IsolationBroker, a disposable Windows VM, a WSL microVM, a NanVix microVM, a bubblewrap namespace, or macOS Seatbelt.

Read the full story

Latest Launches News Practical Opinion Misc