# Zero-Trust Development Environment

> Source: <https://nmm.ee/zero-trust-development>
> Published: 2026-09-27 00:00:00+00:00

## Zero-Trust Development Environment

I’ve been rather unhappy with my development set-up for some time now. As part of my daily work, I work on quite a few projects all the time, often at the same time, and while my ADHD really doesn’t mind the chaos of switching between projects, my computer does.

Dependencies leaking from one project to the next, different version requirements of same tools, and just the general pollution of my system that this leads to are some of my main annoyances. However, in the age of AI, there’s another growing concern I have: **trust**.

My main “IDE” these days is just OpenCode CLI, and my main way of writing code is via AI. As part of my work I also build agents which has made me be very aware of the fact that getting them to be reliable, deterministic and safe is a very difficult ordeal to get right, so me running OpenCode on my machine like every day is full of sunshine is frankly quite stupid.

Thus, I did what any self-respecting engineer should do; I reset my system and started anew. This time around I put every single project inside a Podman container using Distrobox, and every project has its own instance of OpenCode and its own set of SSH keys. I work entirely from within containers now.

It’s a little more work to set-up projects since I have to create SSH keys and install all the dependencies all the time, but my machine stays clean and while it’s certainly not impossible for a bad actor to escape from a container, I do think it greatly mitigates the trust issues I have. Though I must say it’s a little strange not being able to trust your own development tools anymore, but c’est la vie.
