containers are becoming policy wrappers for ai agents

Docker published a post this week about AI Governance, and my first reaction was not "cool, Docker has an AI feature now." My reaction was: of course this is where the market goes. Not because Docker magically solves AI safety. It does not. But because the moment you let agents do real work, the boring container questions suddenly become interesting again: What files can this thing read? What network calls can it make? Which secrets are visible? Can it install packages? Can it write outside...