Home
Storia in 1 fonti
Sandboxing an Agent That Executes Code
A concrete container configuration, what it does and does not stop, and the six escapes that get forgotten because they are not kernel bugs.
Raccontata da
dev.to
Timeline cronologica
- ·
Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.
Bash-only scope, reads wider than writes, a permissioned escape hatch, fail-open, and no native Windows — plus the distinction that matters: containment isn't consequence isn't…
- ·
Sandboxing an Agent That Executes Code
A concrete container configuration, what it does and does not stop, and the six escapes that get forgotten because they are not kernel bugs.