Every agent prompt is a roll of the dice, so jail your agents
ToolsRun AI agents in an isolated VM (network and filesystem jail)
Quote
Meaning, especially with something like Pi, that really just does not have any guardrails whatsoever. Anytime you hit the inner key... you're kind of rolling the dice.
Episode 269: Verbal Pollution (episode page, opens in a new tab) 01:07:43 (play audio from this timestamp, opens in a new tab)
Voice-matched
Summary
With an agent harness that has no guardrails (like Pi), every time you hit Enter you're rolling the dice if it can roam your file system and reach your keys. Dave's plan is to isolate agents in a VM that's network- and filesystem-jailed, physically segregated from the host.
Also said
Episode 268: Dead Hanging Safari (episode page, opens in a new tab) 00:59:38 (play audio from this timestamp, opens in a new tab)
me thinking, though. I mean, like, if... It is good to have like this one like throwaway environment.
Voice-matched
Episode 269: Verbal Pollution (episode page, opens in a new tab) 01:09:51 (play audio from this timestamp, opens in a new tab)
I think that what I'm going to have to do is isolate these things. things into into a VM that's really in a jail, like a network jail and a file system. It's physically segregated from the rest of the host environment.
Voice-matched