Near-term direction
- A dependable sandbox lifecycle.
- Clear SDK and MCP integration.
- Tested self-hosting paths.
- Explicit runtime and security configuration.
- Useful execution logs and diagnostics.
Longer-term direction
- Credential mappings that reduce secret exposure to agents.
- Auditable execution and access decisions.
- Policy controls for callers, runtimes and destinations.
- Organisational and enterprise controls.