alt Hacker NewsI want to draw deterministic boundaries around what the agent can do. I don't want a probabilistic approach to security.
My view is that if the agent can decide to do something, nothing stops that thing from being done accidentally, and any attacker that can inject text into its context can do that thing.
Replies
canibal • last Sunday at 5:39 PM
Simple solution, don't use an indeterministic tool to do things that require deterministic constraints?
➕ show 1 reply
liveoneggs • last Monday at 1:53 AM
Agentic interaction is not deterministic. That's the entire deal.
➕ show 1 reply
Deterministic boundaries appear to be best solved with sandboxes/microVMs/remote infra and unique identities with probabilistic guardrails on top. The old deterministic allow/deny list running on bare metal didn't meaningfully solve the problem of giving Claude determinism. Humans got approval fatigue, and eventually, Claude got access to something like 'python3 FILE.py' and Claude could go to the races by updating 'FILE.py'.