> mirrord lets developers run local code in the context of a remote Kubernetes pod. This lets them test their code in cloud conditions without going through CI and deployment. In most cases, stealing or mirroring incoming traffic from the remote pod to the local process is good enough. However, when you have applications that consume tasks and do more than react to incoming requests, the user might want to pause the remote application completely , so that it doesn’t compete with their local process for tasks.

That sounds like an audit/compliance nightmare. For example, if the infrastructure is within scope of PCI-DSS you're making not just the developer's laptop, but all of the network they're on now part of the audit scope, and it all needs to be up to scratch for security.

Combine that with the risk of using it to sniff/exfiltrate PII etc. I'm astounded that this was even built as a feature. It's a hacker's best friend, surely?

If it's too hard to test your code, fix your test environments, don't make production, or test, come to your laptop.