Running AI Coding Agents Safely: Sandboxing +...

Imagine giving a colleague full, unsupervised access to your entire development machine — your personal files, SSH keys, cloud credentials — just to help with some coding tasks. You wouldn’t do that. Yet, when we run AI coding agents locally, that’s effectively what we’re doing by default. There’s a better way. This article is about what that looks like in practice — based on what I’ve been experimenting with so far. Your agent is an optimizer, not a rule-follower When working with agents you mi