> why put in effort doing something people don't expect or ask for?
True! Why did we bother with devcontainers anyway? Who asked for permissions on tool calls? Only those weird security people care about putting whats effectively a CNC rootkit inside a sandbox. Its not about seriously protecting the user against our AI slop inevitably typing `rm -rf work /` and deleting their entire drive.
True! Why did we bother with devcontainers anyway? Who asked for permissions on tool calls? Only those weird security people care about putting whats effectively a CNC rootkit inside a sandbox. Its not about seriously protecting the user against our AI slop inevitably typing `rm -rf work /` and deleting their entire drive.