From Dev.to
I Sandboxed My AI Coding Agent with Bubblewrap. It Still Read My Secrets
Three Decisions, Three Places Same agent. Same sandbox. Different folder. Different blast radius. Coding agents run real commands on your machine. A README, an issue or a dependency can steer what t...