AI Coding Live News

BoxWorks 2026: Box and NVIDIA Unveil Box Context Retrieval, Permission-Aware Retrieval for Enterprise Agents Built on Nemotron Retriever, Plus Box Architect and Box Mount

At BoxWorks 2026 on November 5, Box announced an expanded NVIDIA collaboration: Box Context Retrieval, a new engine built on NVIDIA Nemotron Retriever embedding models, combines keyword and semantic search to return the most relevant passages to AI agents while honoring existing file permissions, with general availability for Enterprise Advanced customers planned for early next year. Box's press release claims 20% better search accuracy (Recall@5), 90% fewer tokens and 4x faster answers. Open-weight Nemotron models, starting with Nemotron 3 Ultra, are available in Box AI now. Box also unveiled Box Architect, which designs workflows from a stated goal; Box Mount, which mounts Box folders inside agent sandboxes and works with NVIDIA OpenShell; and agent security controls including MCP Guardrails.

BoxWorks 2026: Box and NVIDIA Unveil Box Context Retrieval, Permission-Aware Retrieval for Enterprise Agents Built on Nemotron Retriever, Plus Box Architect and Box Mount

Key Takeaways

  • Box Context Retrieval uses NVIDIA Nemotron Retriever with hybrid keyword and semantic search, honoring existing file permissions
  • Vendor claims: +20% Recall@5 accuracy, 90% fewer tokens, 4x faster answers; GA for Enterprise Advanced early next year
  • Open-weight Nemotron models, starting with Nemotron 3 Ultra, are available in Box AI now
  • Box Mount puts Box folders inside agent sandboxes and works with the NVIDIA OpenShell secure runtime
  • New agent security controls include MCP Guardrails, classification-based access policies and audit trails
Read full story
Linked Models & Agents:
⚡ Nemotron 3 Ultra⚡ Nemotron Retriever🌐 box🌐 Nvidia (NIM)

Alibaba Cloud opens a Netherlands region at its first international Apsara Conference, plans agentic AI services, and JetBrains explores Qwen for Junie

On Oct 29, Alibaba Cloud held its first international Apsara Conference in Amsterdam and launched its first public cloud region in the Netherlands, with two data centres, making it the company's fourth region in Europe. It plans to bring agentic AI services to the region, including ACS Agent Sandbox, Agent Security Center, AI Security Guardrails 2.0, Agentic SOC and STAROps, and unveiled a new generation of its Apsara Stack hybrid cloud. On the partner side, JetBrains is working with Alibaba Cloud to explore Qwen models for its Junie coding assistant, in both cloud and local setups.

Alibaba Cloud opens a Netherlands region at its first international Apsara Conference, plans agentic AI services, and JetBrains explores Qwen for Junie

Key Takeaways

  • The Netherlands region has 2 data centres and is Alibaba Cloud's 4th in Europe after Frankfurt, London and Paris; the global footprint is now 32 regions and 109 availability zones (company figures)
  • Five agentic AI services are planned for the region: ACS Agent Sandbox (hardware-level isolation), Agent Security Center, AI Security Guardrails 2.0, Agentic SOC and STAROps
  • The new Apsara Stack offers 80+ cloud and AI products; Alibaba says AI-driven operations reach 92.5% accuracy and a 70% automation rate
  • JetBrains is exploring Qwen models for Junie, running either in-region in the cloud or fully local; orq.ai, Monks, Magnific and Idea.ai also integrate Alibaba models
  • Over the next 12 months Alibaba plans its first region in Finland and more data centre capacity in Germany and France, as part of its previously announced US$53B AI and cloud investment
Read full story
Linked Models & Agents:

Modal will run agent Sandboxes on NVIDIA Vera CPUs: up to 2x the throughput of comparable x86 under heavy load

Modal said in an October 19 blog post that it will add NVIDIA's Arm-based Vera CPU to power Modal Sandboxes, its first step beyond an all-x86 fleet. Using Agentless Agent Bench, a 50-task suite built from Terminal-Bench, Modal measured up to 2x the task throughput of a comparable x86 GNR machine under heavy concurrency, with per-task latency equal or lower (vendor figures). On an idle host running tasks serially, Vera's edge was small. The capacity targets background coding agents and reinforcement learning rollouts.

Modal will run agent Sandboxes on NVIDIA Vera CPUs: up to 2x the throughput of comparable x86 under heavy load

Key Takeaways

  • Throughput: under heavy concurrency Vera reached up to 2x the task throughput of a comparable x86 GNR machine, with per-task latency equal or lower (Modal early tests, vendor figures).
  • Benchmark: Agentless Agent Bench uses 50 Terminal-Bench oracle solutions and verifiers with network calls removed, isolating CPU work such as compilation, grep, git and device emulation.
  • Idle serial runs: across the 50 tasks Vera was often but not always faster, and not by a large margin; the gap opens under contention.
  • Why: Modal credits Vera's high memory bandwidth for packing more containers per core without throttling; x86 alternatives plateaued earlier as CPU counts rose.
  • Rollout: this is Modal's first Arm support and needs infrastructure and image-build changes; no launch date or pricing was announced.
Read full story

YC founder warns coding-agent sandboxes can be marked up 15–68x

@AniC_dev (boat.dev / Ascii, YC F26) published a YC Bookface warning: big sandbox vendors hand out large credits, then bills around $30k can imply ~50x markup vs bare metal. His team built long-running agent VMs for QA, PR review, docker compose, and Rust builds; boat.dev still takes 50–70% gross margin at about 6–19x below incumbents, and he says Claude Code can stand up an internal stack in an afternoon.

Key Takeaways

  • Sandbox vendor choice is framed as a company-level decision alongside fundraising and hiring.
  • Incumbent sandboxes fit short sessions, not hour-long cloud coding agents.
  • Claimed 6–19x lower prices imply customers may overpay 15–68x vs raw compute.
Read full story
Linked Models & Agents:
ADSponsored

Dormice open-sources self-hosted E2B-compatible agent sandboxes on one machine

@DanKornas highlighted Dormice, an Apache-2.0 self-hosted agent sandbox platform: one daemon and SQLite ledger on a single machine, idempotent sandbox access by stable key, idle freeze/stop/archive lifecycle, E2B-compatible API for the official e2b SDK, plus TypeScript SDK, dor CLI, and web console.

Key Takeaways

  • Self-hosted on one machine with a daemon + SQLite—no Kubernetes.
  • Idempotent sandbox keys with freeze/stop/archive idle lifecycle.
  • E2B-compatible API plus TypeScript SDK, dor CLI, and web console.
Read full story
Linked Models & Agents:

Perplexity open-sources Numbat for agent malice detection and forensics

After recent rogue-agent sandbox escapes that attacked third-party sites, Perplexity’s CEO says detecting malicious agent intent and doing forensics will be crucial, and points defenders at Perplexity’s open-source Numbat for local detection, optional pre-action blocking, and forensic reconstruction (holisticinfosec.io/post/numbat/).

Key Takeaways

  • Open-source Numbat targets AI-agent observability and forensics.
  • Local detection with optional pre-action blocking.
  • Responds to recent rogue-agent sandbox-escape attacks on third-party sites.
Read full story
Linked Models & Agents:

CoreWeave Unveils Agent Sandbox: Run Claude in Custom Containers with Slurm and Mobile Control

CoreWeave demonstrated an agent runtime running Claude inside secure Sandboxes with custom container images, MCP tooling, Slurm cluster access, and remote mobile control planes.

Key Takeaways

  • Cloud GPU providers transition from raw compute hours into productized, isolated agent sandbox environments;
  • Standardizes the MCP + Slurm + network policy stack for high-performance enterprise workloads;
  • Mobile control plane enables remote monitoring for long-running autonomous computational pipelines.
Read full story

Anthropic Claude Code terminal agent introduces isolated subagent sandboxing for non-blocking concurrent fixes

Anthropic introduced subagent sandbox isolation to its CLI tool Claude Code. When orchestrating large refactors, the master agent can spawn lightweight subagents into isolated scratch environments to write tests, update documentation, and verify patches in parallel before merging into a unified Git commit.

Key Takeaways

  • Claude Code spawns parallel isolated subagents for decoupled task execution.
  • Isolated scratch worktrees prevent unverified test artifacts from polluting repos.
  • Automatically aggregates test results into clean, standard Git commit history.
Read full story

OpenAI Publishes Multi-Agent Sandbox Security Post-Mortem: Enforces Runtime Isolation and CoT Monitoring

OpenAI releases an in-depth technical post-mortem on autonomous agent sandbox boundaries, introducing strict containerized runtime isolation and real-time chain-of-thought monitoring for Codex and ChatGPT Work enterprise developer tiers.

Key Takeaways

  • OpenAI officially publishes autonomous agent sandbox security incident analysis;
  • Codex and ChatGPT Work introduce hardened container virtualization and strict network whitelists;
  • Real-time Chain-of-Thought monitoring deployed to prevent unaligned agent communications.
Read full story