These documents support the live demos in ai-agent-sandboxing-en.md.
- Environment setup - install
sbx, prepare credentials, clone either sample, and establish a clean baseline. - Choose the Java live demo runbook or the .NET live demo runbook.
- Continue with Java validation and recovery or .NET validation and recovery.
The demo should make four points visible:
- Copilot CLI runs inside an isolated microVM.
- The modernization agent assesses, plans, and executes a Java or .NET upgrade.
- The agent uses a private Git clone and cannot write to the host repository.
- The sandbox has its own Docker daemon and policy-controlled network access.
The sample applications are UW-Madison-DoIT/uportal-messaging for Java and Azure-Samples/dotnet-migration-copilot-samples for .NET.
- Environment setup - install
aca, prepare Azure RBAC and credentials, and verify the Copilot disk image. - Live demo runbook - create the managed sandbox, generate a UI design plan, and prove that state survives stop and resume.
- Validation and recovery - export evidence, snapshot state, troubleshoot failures, and clean up Azure resources.
Demo 2 runs Copilot CLI in an Azure Container Apps Sandbox, asks it to create a design-only plan for devkimchi/battle-school-lunch, stops the remote sandbox, and resumes the same sandbox with its filesystem state intact.