Bookmark

2026/03/25

Made a little linux tool https://t.co/DSSUuNaLtJGives agents a read-only shell on a machine - they can run top, perf, kubectl get pods, but can't kill, rm, or otherwise modify anything. Enforcement is at the kernel level.

https://x.com/i/status/2036436062877475026

エージェント用のリードだけできるシェル。カーネルレベルで制限されてるとのこと。