Why sandboxing coding agents is harder than you think (martinalderson.com)

"I'm increasingly of the opinion that we need to reimagine the operating system itself..."

yeap!