I'm curious what people on here use to sandbox their coding agents. They all use so many tool calls it's not really possible to check their commands one by one.
I've been using Docker containers but I'm not sure if that's a foolproof solution.
I use a cloudtop for my development. I can provision a new cloudtop and download a clean copy of my repo in around an hour. I SSH or remote desktop from my local workstation to that machine for anything I need to run. The agent runs in a web service on that machine, which is how I interact with it.
Cloudtops only have access to credentials for my personal instances. Instances can be wiped and brought back up in about half an hour from a script. Any deployment to staging/prod is done with other tooling that doesn't run through AI, and only looks at checked-in code.
If my AI went completely haywire, it could hose my personal instances and a single cloudtop. It would take about 15 minutes to de-provision the old cloudtop and provision a new one. After that I'd kick off 45 minutes of git cloning, and in parallel run the scripts to wipe my personal instances and reset them to good. After an hour I'd be back to a clean workable state.
I've had to do this twice, but neither time was due to AI, both were due to bad updates my cloudtops got.
I use the Claude Code cloud sessions feature which is similar, it creates a cloud VM and runs all the code on that. It's pretty handy since you can just ask for a change to a repo on the mobile app and it can run everything on the VM and make a PR.
Sometimes I just want to work on local files though, and with Claude code there isn't really a good way to sandbox it while also having access to claude-in-chrome.
I use droneship, it basically feels the same as running locally (droneship run claude) but it runs in a cloud sandbox with easy egress control. It takes running snapshots that you can rollback and you can diff the workspace and pull to bring the changes back to your local.
"Gemini" didn't do anything. As we are often admonished in these threads, Gemini is just a stochastic next token predictor. It can't have any responsibility for 'doing' anything.
"A computer can never be held accountable, therefore a computer must never make [an important] decision." -- IBM manual, corrected
Someone hooked up their computer to a random number generator that can destroy it, and their computer got destroyed. The weird part is not why the RNG foot-gun shot someone in the foot again...
I'm curious what people on here use to sandbox their coding agents. They all use so many tool calls it's not really possible to check their commands one by one.
I've been using Docker containers but I'm not sure if that's a foolproof solution.
I use a cloudtop for my development. I can provision a new cloudtop and download a clean copy of my repo in around an hour. I SSH or remote desktop from my local workstation to that machine for anything I need to run. The agent runs in a web service on that machine, which is how I interact with it.
Cloudtops only have access to credentials for my personal instances. Instances can be wiped and brought back up in about half an hour from a script. Any deployment to staging/prod is done with other tooling that doesn't run through AI, and only looks at checked-in code.
If my AI went completely haywire, it could hose my personal instances and a single cloudtop. It would take about 15 minutes to de-provision the old cloudtop and provision a new one. After that I'd kick off 45 minutes of git cloning, and in parallel run the scripts to wipe my personal instances and reset them to good. After an hour I'd be back to a clean workable state.
I've had to do this twice, but neither time was due to AI, both were due to bad updates my cloudtops got.
I use the Claude Code cloud sessions feature which is similar, it creates a cloud VM and runs all the code on that. It's pretty handy since you can just ask for a change to a repo on the mobile app and it can run everything on the VM and make a PR.
Sometimes I just want to work on local files though, and with Claude code there isn't really a good way to sandbox it while also having access to claude-in-chrome.
I use droneship, it basically feels the same as running locally (droneship run claude) but it runs in a cloud sandbox with easy egress control. It takes running snapshots that you can rollback and you can diff the workspace and pull to bring the changes back to your local.
Some AI (not this one) had advised me to nuke stuff a lot of times just to solve a minor problem.
Problem with one website? Change settings for the entire OS.
Problem with one file? Delete the entire folder.
AI is super dangerous when giving advice on OS management. Giving it the keys to your computer is s*icidal.
https://archive.ph/5lKuo
I can’t get that one to load either, here’s the non-old Reddit link, which won’t force login at least:
https://reddit.com/r/google_antigravity/comments/1xpbc54/ant...
For now
https://www.bleepingcomputer.com/news/security/reddit-to-loc...
"Gemini" didn't do anything. As we are often admonished in these threads, Gemini is just a stochastic next token predictor. It can't have any responsibility for 'doing' anything.
"A computer can never be held accountable, therefore a computer must never make [an important] decision." -- IBM manual, corrected
Someone hooked up their computer to a random number generator that can destroy it, and their computer got destroyed. The weird part is not why the RNG foot-gun shot someone in the foot again...