The Closed Track: Shrinking an AI Agent's Blast Radius Part 4
A code-running agent tool inherits its pod's blast radius. NetworkPolicy, a dropped ServiceAccount token and gVisor shrink it — and a blast-radius report shows which layers actually hold.
#sandboxing
The Frontier Has a Brake Pedal. The Floor Doesn't.
In June I asked whether Anthropic's warning was a brake pedal or a press release. The essay arrived — and it's a real mechanism, aimed one layer above where most of us actually ship agents.
I Want a Personal Agent. I'm Not Running One Yet — Here's What Would Change That
Part 2: sandboxing with agent-sandbox, evaluating nanobot and nanoclaw, prompt injection realities, and the pre-flight checklist before I trust an autonomous agent.