Agents in the Sandboxes — LangChain Community × Focused.io

Agents in the Sandboxes

What happens when an AI agent goes rogue?

LangChain Community London × Focused.io

AI agents are becoming increasingly capable.

They can reason, use tools, call APIs, browse the web, execute code, interact with enterprise systems, and take actions on our behalf.

But as we give agents more autonomy, another question becomes just as important

What happens when an agent does something it was never supposed to do?

Join LangChain Community London × Focused.io for Agents in the Sandbox, an evening exploring how we design, control, observe, and safely operate agentic AI systems in the real world.

We’ll look beyond the hype and focus on the engineering challenges that appear when agents move from demos into production.

An agent might call the wrong tool, follow a malicious instruction hidden inside external content, access something outside its intended scope, enter a costly loop, or take an action that should have required human approval.

The challenge is not simply making agents more intelligent.

It is making them powerful enough to be useful, while controlled enough to be trusted.

What We’ll Explore

Throughout the evening, we’ll discuss some of the most important topics shaping production agentic AI

• Agent sandboxing and controlled execution
• Tool permissions and least-privilege access
• Prompt injection and untrusted content
• Trust boundaries across agents, tools, APIs, and data
• Human-in-the-loop approval for high-impact actions
• Agent observability and tracing
• Evals, guardrails, and behavioural testing
• Failure modes, retries, loops, and unexpected actions
• Moving from agent prototypes to reliable production systems

We’ll also explore where technologies such as LangChain and LangGraph fit into the architecture of modern agentic applications.

At the centre of the event is one key question

How do we give AI agents enough autonomy to be useful without giving them more freedom than we can safely control?

Schedule

6:30 PM — Doors Open
Food, drinks, networking, and conversations with the community.

7:00 PM — Welcome: Agents in the Sandbox
Why agent control, security, and observability are becoming critical as AI systems gain more autonomy.

7:15 PM — Why Your Agent Needs a Sandbox: A Practical Introduction - talk by Agustin Rodriguez, Senior Agent Engineer at Focused.io
AI agents increasingly write and run their own code, but running untrusted, model-generated code on your machine or servers is risky. You will learn what sandboxes are, why agents need them, and how the main options compare.

7:45 PM — What's Inside the Box: Building Sandboxes for Agents You Don't Trust - talk by Daniel Kneipp, Software Engineer at LangChain
This talk looks inside the Sandbox and how LangSmith Sandboxes are built: a Firecracker microVM per agent, a host that treats every guest as hostile, an outbound proxy that lets agents use credentials they never see, and what we watch for when something inside tries to get out. Then we will chat about how we made it fast and where sandboxes fit in a LangChain agent - as a tool, an eval harness, and a CI runner.

8:15 PM — Beyond the Sandbox: Threat Modelling AI Agents - talk by Abd Bastola, Manager at BCG
This talk is about the risks that remain once an AI agent is sandboxed. Building on the earlier sessions, we’ll explore how agents access data, use tools, and take actions across trust boundaries. Through public security examples, selected OWASP LLM risks, and practical workflow scenarios, we’ll examine the permissions, oversight, and controls needed before giving agents more autonomy.

8:40 PM — Community Q&A and Discussion
Bring your questions, architectures, experiences, and opinions.

9:00 PM — Closing & Networking

Who Should Attend

This event is for

• AI and ML engineers
• Software engineers
• Solution and platform architects
• Security practitioners
• Product managers and AI product builders
• Founders and startup teams
• Researchers and students
• Developers working with LangChain or LangGraph
• Anyone interested in agentic AI and production AI systems

You don’t need to be a LangChain expert.

If you’re interested in AI agents, production engineering, AI security, observability, or responsible autonomy, this event is for you.

About LangChain Community London

LangChain Community London brings together developers, AI engineers, researchers, founders, and technology enthusiasts building applications with large language models and AI agents.

The community explores technologies and engineering practices across LangChain, LangGraph, agentic systems, RAG, evaluation, observability, and production AI, with a focus on practical learning, collaboration, and sharing real-world experience.

About Focused.io

Focused.io is a software and AI engineering company that works alongside product and engineering teams to build production-ready systems.

Focused.io works across areas including custom AI agents, production RAG systems, custom software development, and eval-driven development, with a strong emphasis on reliability, testing, and moving AI systems from prototype to production.