Apache Airflow ships AI Provider 1.0 with agents and sandboxing

Apache Airflow released AI Provider 1.0, a set of DAG tasks for running LLM agents inside existing pipelines. It adds sandboxed code execution, human approval gates (Airflow 3.3+) and smarter retry logic, and installs on Airflow 2.11 and later.

• The apache-airflow-providers-common-ai package installs on Airflow 2.11 and later
• Supports OpenAI, Anthropic, Google and Bedrock models via a pydanticai connection
• Sandbox is a Python subprocess with restricted filesystem and no Airflow access
• Human approval gates require Airflow 3.3 or newer