if your model ever touches bash, it has unfettered acess to all your files.
Not if the harness applies an OS-level sandbox to the process, as Codex does.
https://learn.chatgpt.com/docs/sandboxing?surface=cli
alt Hacker News
Not if the harness applies an OS-level sandbox to the process, as Codex does.
https://learn.chatgpt.com/docs/sandboxing?surface=cli