Give a coding agent a task, not a pasted policy. In this demo, fx,
@vercel's open-source coding agent, uses Box CLI to fetch the approved policy by ID and check the repo against it.
The policy caps export links at 7 days, requires actor IDs in audit events, and requires test coverage. fx finds 30-day link defaults, missing actor IDs, and missing tests. It updates the code, passes 22 tests plus a runtime check, and packages the Git revision, diff, test output, and checksums. It also flags what it couldn’t verify.
Before writing back to Box, fx confirms the account, confirms nothing has been shared, and asks for approval. After approval, it uploads the evidence, verifies hashes, and confirms no shared links.
Our demo uses Box CLI for policy retrieval and evidence uploads. For sandbox workflows, Box Mount provides Box content as a POSIX filesystem, with two-way sync and Box permissions and governance per operation.