I thoroughly sandbox agents to their own physical machine, and they don't have access to anything that would ruin me.
How do you sandbox this usecase?
Say you need an agent to do ssh to a set of servers on a regular basis so you kind of allow ssh. Can you configure just a set of IPs it may reach? Do you require some user interaction for ssh approvals?
alt Hacker News
How do you sandbox this usecase?
Say you need an agent to do ssh to a set of servers on a regular basis so you kind of allow ssh. Can you configure just a set of IPs it may reach? Do you require some user interaction for ssh approvals?