Hacker News Reader

Comment by SubiculumCode | Hacker News Reader

What is your sandbox approach? Any good guides? Something about asking a LLM for advice on how to sandbox LLMs.....

I use this: https://github.com/kstenerud/yoloai

    yoloai new mysandbox .   # Create a sandbox
    yoloai attach mysandbox  # Attach the sandbox to the current terminal
    ... (^b^d to disconnect) # It's using tmux to keep the agent alive
    yoloai diff mysandbox    # See what the agent did
    yoloai apply mysandbox   # apply its changes to your workdir
    yoloai destroy sandbox

You can also make it run a prompt and block until it's done:

    yoloai run mysandbox . -p "read issue https://github.com/kstenerud/yoloai/issues/190 and fix it"
    yoloai diff mysandbox
    yoloai apply mysandbox
    yoloai destroy sandbox

thanks. I will check that out, I'm also checking out smolvm. Sometimes it is hard to distinguish my modest needs versus what might be needed at a corporate infrastructure level for coding or agent orchestration.

I'm just writing scripts for neuroimaging analysis, etc, and want to ensure codex etc doesn't read my sqlite db or csvs, and send my research data to the inference provider...

Are people using these and interacting with the agent via terminal, or are there fuller cli interfaces, or integrations?

The problem is that sandbox security is a VERY HARD problem that seems deceptively simple. I started out modestly, and yoloAI is the result of all of the problems I encountered along the way.

Reply on news.ycombinator.com