If an agent can write files, sandboxing should:
Select an answer to reveal the explanation.
Short Explanation
Agents write to a disposable sandbox, not to / or the secrets volume.
Full Explanation
Filesystem sandboxing limits blast radius.
Select an answer to reveal the explanation.
Agents write to a disposable sandbox, not to / or the secrets volume.
Filesystem sandboxing limits blast radius.