Dynamic, identity-aware, and secure Sandbox auth

Outbound Workers for Sandboxes enable secure, identity-aware authentication for sandboxed agents without exposing credentials to untrusted workloads.

• •Outbound Workers intercept HTTP requests from sandboxes and apply custom rules, enabling credential injection at the proxy level while maintaining zero trust
• •Host-specific handlers allow defining different authentication and access control logic for each domain or service
• •Dynamic networking controls can be applied at sandbox startup and modified during execution, enabling policies that evolve based on workflow stages
• •Integration with Cloudflare Developer Platform bindings (R2, KV, Agents) simplifies access control without requiring external token management
• •Observability is built-in through Workers, allowing logging and monitoring of all outbound requests from sandboxes