Sandbox-bwrap-nix, a lightweight sandbox combining bubblewrap and Nix, boots in under a second with no daemon or root privileges, providing isolated environments for running AI coding agents and exper…
Anthropic detailed the containment architectures it uses for Claude across web, developer, and desktop products, arguing that agent safety depends on deterministic limits on filesystem, network, and e…
Developer Joe Swell built flar, a tool to sandbox AI agents using bubblewrap, and discovered that each agent CLI implements history and resume differently, requiring custom backends. He let each agent…
Claude Code and Codex both use OS-level process sandboxing to prevent AI models from executing harmful shell commands, relying on Linux primitives like bubblewrap for filesystem isolation and seccomp …
Lmcli v0.7.0, a general-purpose LLM harness written in Go, has been released with smooth performance at 1M+ token context and features including composable agents, custom tools, sandboxed execution, a…