ZedFrom the builder

Sandboxing

Starting with release 1.14, Zed turns on sandboxing for everyone by default, with the operating system restricting what the agent panel's terminal and fetch tools can do. The default rules block writes outside project directories, writes to .git and network requests, and while agents can ask for temporary escalation, they can never request .git write access because hooks could run outside the sandbox. Zed argues that instructions alone cannot stop prompt injection, such as a malicious pull request whose modified AGENTS.md tells an agent to exfiltrate secrets.

Official blogAug 5, 20268 min read