A quote from Thibault Sottiaux

A concrete failure case showing how a full-access coding agent can destroy user data (including $HOME) when run without sandboxing — essential reading before granting any autonomous agent unrestricted filesystem permissions, and a reminder to default to sandboxed or scoped execution.

• AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
• sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.

• articleFirefox in WebAssembly
• articleThe Pelican Benchmark (SVG Pelican on a Bicycle)
• articleDOOMQL
• articlexai-org/grok-build, now open source

• articleCodexopenai.com
• postHow OpenAI hardened Codex against destructive file deletionsTibo
• repoCodex Orange Book花叔

Checking sign-in…

Loading comments…