The One Thing Every AI Agent Framework Agrees On - Mislav Ivanda, Daytona

Mislav Ivanda of Daytona has integrated sandboxes into most of the major agent frameworks, and noticed that frameworks that disagree on almost everything all ended up in the same place. He compares three ways to run agent-generated code: allow lists and approval prompts, embedded runtimes, and a separate sandboxed computer. He explains why only the last one keeps a compromised step from compromising your app, and shows frameworks like CrewAI, AG2 and the OpenAI Agents SDK moving to sandboxes. His advice: models, prompts and even frameworks are easy to swap, so choose where your agent's code runs before you choose a framework. Chapters: 0:00 Intro 0:52 Guess the framework 2:20 Frameworks that agree on nothing 3:42 Where should agent code run? 4:12 Option 1: allow lists and approvals 5:23 Option 2: embedded runtimes 6:46 Option 3: a separate computer 7:54 Frameworks are moving to sandboxes 9:19 How sandbox use has changed 10:33 Which framework should I pick? 12:46 The one choice you can't easily swap 14:09 Frameworks are opinions, boundaries are commitments Mislav Ivanda https://www.daytona.io Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!