> Now with these insane agents trying to break out, I'm happy that it's second nature to me. FWIW, the cases of these agents "breaking containment" is not some

> Now with these insane agents trying to break out, I'm happy that it's second nature to me. FWIW, the cases of these agents "breaking containment" is not someone asking "Create space invaders in HTML, CSS and JS" and the agent breaking out of containers and VMs to destroy the user's computer. They're effectively asking the agents "Answer question X, find the answer in any way you deem possible and applicable" during evaluations and letting them run for days, hoping the agents come up with their own strategies, which sometimes results in "cheating" like getting internet access to query public datasets, and similar stuff. And in this case, getting access to production databases to look up answers :) As long as your filesystem is disconnected from the container you run (so no synced/mounted volumes, instead copy stuff in, copy stuff out), you're safe just running agents in the container without full VM isolation.