Docker shares the host kernel. That was always the trade. It was fine when a human read the script...

Docker shares the host kernel. That was always the trade. It was fine when a human read the script...

See how one AI-generated rm -rf ~/ command wiped a developer’s Mac and how Docker Sandboxes help contain destructive AI agent failures.