Matthew Green：隔离沙箱不足以遏制失控智能体，可形成智能体蠕虫
Quoting Matthew Green
密码学家 Matthew Green 提出，隔离沙箱不足以遏制失控智能体：被劫持的智能体可在共享包缓存中留下指令，改变其他智能体的行为，从而构成蠕虫的两半——劫持智能体的载荷，以及把载荷传给下一个智能体的智能体。
1st October 2026
[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with independently-deployed personal agents like Muse, and you have exactly the ingredients that a worm needs.
— Matthew Green, Is sandboxing sufficient to contain rogue agents?
来源：Simon Willison · simonwillison.net