3 ms·
You should absolutely be running your AI agent inside _some_ kind of sandbox. I put together a list of 19 mostly open-source ones here: https://pleasedonotescap
by petesergeant 3mo ago
You should absolutely be running your AI agent inside _some_ kind of sandbox. I put together a list of 19 mostly open-source ones here: https://pleasedonotescape.com/ https://pleasedonotescape.com/ along with a list of non-project-solutions
- wren6991 3mo agoYeah, I don't think that line quite landed. My point was that LLMs are inherently adversarial (read, "relentlessly proactive") and sandboxing should be a first-class integral feature of your harness, not an afterthought. The problem with dev containers is you still tend to end up with something you care about on the same side of the trust boundary as the LLM.
- petesergeant 3mo ago> LLMs are inherently adversarial (read, "relentlessly proactive") [and] you still tend to end up with something you care about on the same side of the trust boundary as the LLM I mean this is a problem with many coworkers too, so you deal with it in the same way: limit what they can do to creating pull requests.
- cowpig 3mo ago`greywall -- opencode`