Security by Compartmentalization for AI Coding Agents on NixOS | Hacker News Reader