Hacker News Reader

> And most corporate workstations do not allow sandboxing of any kind

I don't think that's phrased correctly. What corporate it does is set policies. Often those policies disable virtualisation. (They don't disable sandboxing - that's used in many ways and security loves that) But if the business need is to run LLM agents safely, the policies will be changed to dictate how to run agents safely.

View on HN

Dev containers under vs-code are a good example of this.

Many teams use them to make sure that the coding environment is consistent, and they are well accepted in many corporate environments as a result.

But they are a good way of firewalling agents away from files and resources that one must be able to demonstrate that the agents did not and could not have access to.

Reply on news.ycombinator.com