This article discusses two patterns for connecting agents to isolated execution environments called sandboxes. The first pattern runs the agent inside the sandbox, while the second keeps the agent on a local server and uses the sandbox as a tool. Each method has its own benefits and trade-offs regarding security, update speed, and separation of concerns.