AI Sandboxing

One thing that really slows me down is all the questions Claude asks.

I’ve been pondering running in a Docker container with –dangerously-skip-permissions and only mapping in the currently working directory plus maybe the ~/.claude directory.

Any thoughts on this?

OpenShell

OpenShell is a Nvidia project that provides sandboxed environements.

Since AI agents are “the future”, it’s probably a good idea to experiment with them in a container or even on a separate physical box with access restrictions.

Even when I use Copilot CLI, I always feel a little apprehensive that it can execute read-only commands like grep without prompting me. This invites security vulnerabilities that are yet unknown. But, also please stop prompting me, haha!