# Engineering

## Featured articles

- [

    11 AugustEngineering

    ## A sandbox without a network boundary is only half a sandbox

    Running untrusted code safely requires more than runtime isolation. You must control what that code can reach.

    Brandon TuttleSoftware Engineer, Compute

    ](/blog/a-sandbox-without-a-network-boundary-is-only-half-a-sandbox)

- [

    6 AugustGeneral

    ## Introducing Agent Plugins

    Agent Plugins is an open, vendor-neutral standard for plugins that extend AI agents.

    Jonathan HefnerMember of Technical Staff

    ](/blog/introducing-agent-plugins)

- [

    30 JuneGeneral

    ## Run any Dockerfile on Vercel

    Vercel now runs any HTTP server straight from a Dockerfile. Bring a Rails, Django, Spring Boot, or Go app, and we can run it.

    Malte Ubl, Luke Phillips-Sheard, and 1 other

    ](/blog/dockerfile-on-vercel)

## Blog posts

- [

    12 AugustEngineering

    ### Building a software factory for AI SDK

    Lars Grammel, Eric Dodds

    ](/blog/building-a-software-factory-for-ai-sdk)

- [

    11 AugustEngineering

    ### A sandbox without a network boundary is only half a sandbox

- [

    4 AugustEngineering

    ### Next.js 16.3 support on Vercel

    Luba Kravchenko, Mark Knichel

    ](/blog/vercel-supports-next-js-16-3)