Rye (auto-discovered)

DeepSeek Harness, an open-source agent framework released as a developer preview, ships a fail-closed filesystem sandbox using bubblewrap, Landlock, Seatbelt, or Windows ACLs, but its documentation st…

Docker's new Docker Sandboxes product runs AI coding agents such as Claude Code, Codex CLI, Copilot CLI, Kiro, and OpenCode inside dedicated microVMs with custom VMMs, providing hardware-level isolati…

Researchers extracted 182 credentials and 367 PII artifacts from encrypted chain-of-thought fields returned by Anthropic, OpenAI, and Google APIs, including secrets that never appeared in plaintext pr…