Kiro introduces local sandboxing for IDE and CLI to enhance security

Kiro CLI: Kiro CLI is a command-line interface for interacting with Kiro agents in local sessions, enabling native execution of build, test, and refactor commands on the user's machine. It now ships with generally available local sandboxing powered by kernel-level tools such as bubblewrap on Linux. The CLI supports easy enabling via commands like /sandbox on and integrates with existing permissions policies. Kiro IDE: Kiro IDE is an integrated development environment designed for running AI agents that execute commands directly on the user's local machine, providing access to the full filesystem, toolchain, and localhost services. The tool now includes generally available local sandboxing that enforces operating system-level restrictions on agent-run commands. This development addresses approval fatigue and security risks when agents handle longer or parallel tasks. Security: Local sandboxing confines agent commands using operating-system enforcement including seatbelt on macOS, bubblewrap on Linux, and AppContainer on Windows, in addition to Kiro’s existing tool permission checks. Availability: Local sandboxing is generally available now in both Kiro IDE and Kiro CLI on macOS, Linux, and Windows, and is off by default until enabled via sandbox.json or CLI commands. Configuration: Users can activate sandboxing through configuration files such as ~/.kiro/settings/sandbox.json or /.kiro/settings/sandbox.json, or directly in the CLI and IDE without restarting sessions.