Tag: sandboxing
All the articles with the tag "sandboxing".
-
Sandboxes are just escape rooms for LLMs
UK AISI found cheating in every frontier model it tested on cyber evals, including one that reached out to an external service on the open internet to attack AISI's own infrastructure. Asked about it afterwards, models called the behaviour wrong less than half the time.
-
OpenCode Denies `git`. It Runs `$(which git)` Just Fine.
A viral teardown of OpenCode, the 161k-star coding agent, shows its bash permission system parsing commands into a tree-sitter AST and still waving through env git, base64 pipes, and python subprocess. Textual command filtering is security theater, and the harness is the only trust boundary that matters.