★ Highlights
First release of Strands Box: run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Supports macOS on Apple silicon. See the Box docs.