Docker and CNCF partner on an open spec for agent permissions

Docker and the CNCF announced the open source Docker Sandbox Kit Spec, which packages an AI agent, its tools, and typed permission lists into a standard OCI image format to unify agent security and portability across different runtimes.