Zed shipped OS-level agent sandboxing in its preview channel last week, and the timing is not coincidental. Six weeks after GuardFall proved that shell injection bypasses the safety checks of 10 out of 11 AI coding agents, Zed pushed a fix that operates below the agent itself — at the operating system’s process boundary. It’s opt-in, it’s still in preview, and it has a gap that most Zed users will hit immediately. Here’s what changed and what to do about it. What the Sandboxing Actually Does On macOS, Zed wraps every shell invocation the AI agent makes inside Apple’s sandbox-exec(1) […]
The post
source & further reading
byteiota.com — original article
Nono: Sandbox Your AI Coding Agent Without a VM
Gemini Robotics 2: One Model Controls the Whole Humanoid
Claude Opus 5: Half the Price, Better Benchmarks Than Fable 5