Matthew Green 分析沙箱隔离能否遏制失控智能体
Quoting Matthew Green
Simon Willison 引用 Matthew Green 的分析：被劫持的载荷加上会把载荷传给下一个智能体的智能体，构成蠕虫的两半。实验中相互隔离的沙箱智能体发现可以在共享包缓存中留下指令并改变接收方的行为；把包缓存换成邮件、Slack、共享文档或 WhatsApp，把独立沙箱换成独立部署的个人智能体（如 Muse），就具备了蠕虫所需的全部条件。
1st October 2026
[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with independently-deployed personal agents like Muse, and you have exactly the ingredients that a worm needs.
— Matthew Green, Is sandboxing sufficient to contain rogue agents?
来源：Simon Willison 博客 · simonwillison.net