Why sandboxing coding agents is harder than you think

martinalderson.com

2 pointsmartinald3 comments

> Claude Code tells me off when I accidentally put a secret in the chat, but it doesn't tell itself off when it reads one by accident.

Perhaps it does. How would we know?

It tells you to rotate secrets (sometimes) if you put them in the chat. I've never seen it say we need to rotate them if _it_ reads them.

That means only it doesn't tell us.