Comment on A deep dive on agent sandboxesparentComments−nullishdomain7moThis looks awesome! Do you have a mental process you run through to determine what gets run in the sandbox, or is it your default mode for all tools?−ashishb7moThis looks awesome! Do you have a mental process you run through to determine what gets run in the sandbox, or is it your default mode for all tools?Here's what I use it for right now- yarn - npm - pnpm - mdl - Ruby-based Markdown linter - fastlane - Ruby-based mobile app release tool by Google - Claude Code - Gemini CLIOver time, my goal is to run all CLI-based tools that only need access to the current directory (and not parent directories) via this.−tapete17moWhy not just use the standard Linux tool bubblewrap?
Comments
This looks awesome! Do you have a mental process you run through to determine what gets run in the sandbox, or is it your default mode for all tools?
Here's what I use it for right now
- yarn - npm - pnpm - mdl - Ruby-based Markdown linter - fastlane - Ruby-based mobile app release tool by Google - Claude Code - Gemini CLI
Over time, my goal is to run all CLI-based tools that only need access to the current directory (and not parent directories) via this.
Why not just use the standard Linux tool bubblewrap?