Sign InOpen Brain
VercelEngineering PostOfficial Source

Give every agent in Herdr its own Vercel Sandbox

Herdr can place each terminal coding agent in a separate Vercel Sandbox, then return its work as an opt-in Git patch instead of letting remote edits touch the local checkout.

Vercel · Aug 6, 2026
Open Source Open MarkdownOpen JSON
Source Summary

Herdr’s Vercel plugin gives Claude Code, Codex, and OpenCode **one isolated Sandbox per agent**. It uploads the project, installs the agent, opens a connected pane, and exposes every action as **JSON**.

Practical Implication

Use the first invocation to inspect the complete upload set, then run it again to create the environment. Parallel agents stay off the local machine, and completed changes return as a **Git patch** that you choose whether to apply.

Agent-Ready Context
Herdr’s Vercel plugin gives Claude Code, Codex, and OpenCode **one isolated Sandbox per agent**. It uploads the project, installs the agent, opens a connected pane, and exposes every action as **JSON**.

Use the first invocation to inspect the complete upload set, then run it again to create the environment. Parallel agents stay off the local machine, and completed changes return as a **Git patch** that you choose whether to apply.

Isolation does not remove trust decisions: project files are uploaded to Vercel, applying remote work remains your responsibility, and usage incurs **standard Sandbox rates**. Permanent deletion still requires a typed confirmation.
Connected Context · Feed7 Judgment

This packages per-agent cloud isolation into a usable local workflow with inspectable uploads, JSON action records, and reviewable Git patches. It strengthens the case for parallel agents without local contention, while making the trust boundary explicit: code leaves the machine, remote output is not accepted automatically, and separate sandboxes carry stronger isolation and cost implications than user separation inside one sandbox.

Run multiple isolated agents in a single SandboxThis is a direct architectural contrast: Herdr assigns a sandbox to each agent, whereas the earlier approach separates agents as Linux users within one sandbox, trading a stronger boundary for potentially simpler sharing.From fork() to Fleet: Designing an Agent Sandbox Cloud — Abhishek Bhardwaj, OpenAIThe sandbox-cloud design explains why per-agent isolated environments matter for long-running coding work and adds recovery and branching concerns beyond Herdr’s upload-and-patch workflow.Multiplayer agentic engineering — Arjun Singh, SuperconductorSuperconductor independently reinforces the same team pattern of visible parallel sessions in isolated cloud environments, while emphasizing repository-specific evaluation and human review.Scaling Managed Agents: Decoupling the brain from the handsAnthropic’s separation of stateless agent harnesses from replaceable containers provides a broader service architecture for the per-agent sandbox boundary that Herdr exposes as a developer plugin.
Context Map
infracodingsecurity#sandboxing#cloud-agents#multi-agent
Uncertainty
Isolation does not remove trust decisions: project files are uploaded to Vercel, applying remote work remains your responsibility, and usage incurs **standard Sandbox rates**. Permanent deletion still requires a typed confirmation.