Defense in depth + defense in breadth - aka. all of the above
sandbox escapes have been the rage recently
Not firecracker
please don't jinx it
Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.
No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac
Not firecracker
please don't jinx it
Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.
No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac