Uploaded July 2026 | Updated September 2026, 3 weeks ago

---

How do you go from user code you've never seen and don't trust to tools an agent can call safely? Recorded live at Vercel Ship 2026 in New York City, Jonathan Clem (Software Engineer, Notion, previously GitHub Actions) walks through how Notion Workers, the SDK and runtime for extending Notion with custom code, is built on Vercel Sandbox, then builds a mini version of it live.

CHAPTERS
0:00 What are Notion Workers?
1:47 Safety lessons from GitHub Actions
4:23 Demo: is this workshop cursed?
7:08 The architecture: Blob, sandboxes, agents
11:37 Self-describing code: extracting tools safely
21:27 Executing untrusted tools in fresh sandboxes
25:09 Production tips: exits, output limits, snapshots
28:31 Q&A: dedup, billing, and Letterboxd

LINKS
Notion for developers → developers.notion.com
Vercel Sandbox → vercel.com/docs/vercel-sandbox
Ship 2026 recap → vercel.com/blog/vercel-ship-2026-recap
Start building → vercel.com

FOLLOW VERCEL
X → https://x.com/vercel
LinkedIn → linkedin.com/company/vercel
GitHub → github.com/vercel

#Vercel #VercelShip #Notion #NotionWorkers #Sandbox #AIAgents