logoalt Hacker News

prpltoday at 2:10 PM1 replyview on HN

For one, I’ve been working on a generic sandbox environment

github.com/brianv0/formwork

You should be easily able to hide/lock down files, network, and MCP tools from an agent and it shouldn’t be up to the agent.


Replies

hobofantoday at 2:26 PM

> files, network, and MCP tools

Locking that down to nothing is trivial for any harness: just don't expose those to the LLM.

The tricky part is allowing access to those.

show 1 reply