Hyperlight Sandbox + MCP CodeMode: Secure Agent Execution Beyond Containers

Introduction Most MCP CodeMode implementations today still execute generated code inside local processes, shared-kernel containers, or userspace sandboxes that ultimately rely on the host Linux kernel as the primary security boundary. In the previous post, OpenSandbox already demonstrated how production-grade sandbox orchestration can significantly improve safety compared to running generated Python directly on the host machine. But once agents start executing untrusted code, third-party tools,