Agent and Execution Environment Isolation

This module covers cross-system identity governance for agents, tools, MCP, and A2A; permission management across an agent fleet; and sandboxing and network isolation for code execution, browser automation, and computer use. For protocol-specific OAuth and audience details, see Tool Protocol Security; for architectural patterns that minimize permissions, see Agent Security. This module focuses on the organization-wide identity governance and execution isolation not covered in those chapters.

Chapters

1. Chapter 7: Least Privilege and Identity Governance for Agents, Tools, MCP, and A2A
2. Chapter 8: Sandboxing and Network Isolation for Code Execution, Browsers, and Computer Use

Return to AI Safety, Security, and Governance.