Docker is pushing AI agent permissions into ordinary OCI images, so what an agent can touch becomes as portable and pullable as the agent itself. The spec now ships as v3 with CNCF backing, but only Docker's own Sandboxes runtime actually enforces any of it.

— via InfoQ, Claudio Masolo