#claws

There isn't a sandbox in the world that prevents this. Sandboxes are useful for isolating between workloads, but agents primarily need to be isolated from you. The only thing the sandbox gives you here is filesystem protections, which keep the agent from rm -rf'ing your root, and network protections, which limit which websites the agent can access. This is definitely useful. But it's not at all sufficient for safety.

AI assistant for solo blue-collar contractors. Estimates, memory, photos, voice memos, and more, all through Telegram.