{"slug": "stop-letting-ai-agents-touch-your-c-drive", "title": "Stop Letting AI Agents Touch Your C: Drive", "summary": "A developer published a method for sandboxing AI coding agents on Windows by mapping the agent's workspace to its own drive letter using the built-in subst command, rather than relying on Docker or a VM. The approach confines the agent to a single drive so it cannot read or modify files outside that workspace, such as the .ssh folder or hosts file. The tools are offered as one-time purchases.", "body_md": "Your AI coding agent can read your .ssh folder. It can edit your hosts file. It can delete your whole C: drive if it goes wrong.\n\nWhy are you letting it?\n\n## \n  The fix\n\nMap the agents workspace to its own drive letter. Done.\n\n- Local folder workspaces: subst.scsoi.com\n- WebDAV/cloud workspaces: drive.scsoi.com\n\nThe agent sees a normal drive. It writes there happily. It cannot see anything outside that drive.\n\n## \n  No containers needed\n\nYou dont need Docker Desktop. You dont need a VM. You just need Windows drive mapping, which has existed for 30 years.\n\nBoth tools are one-time purchases. Set it up once, run agents worry-free forever.", "url": "https://wpnews.pro/news/stop-letting-ai-agents-touch-your-c-drive", "canonical_source": "https://dev.to/scsoi/stop-letting-ai-agents-touch-your-c-drive-52lg", "published_at": "2026-10-24 08:03:14+00:00", "updated_at": "2026-10-24 08:12:49.571300+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "developer-tools"], "entities": ["subst", "WebDAV", "Docker Desktop", "Windows"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/stop-letting-ai-agents-touch-your-c-drive", "markdown": "https://wpnews.pro/news/stop-letting-ai-agents-touch-your-c-drive.md", "text": "https://wpnews.pro/news/stop-letting-ai-agents-touch-your-c-drive.txt", "jsonld": "https://wpnews.pro/news/stop-letting-ai-agents-touch-your-c-drive.jsonld"}}