Hacker News Reader

I would argue that it is the harness's job... Certainly for any harness which is targeting an end user.

They don't sell cars without seat belts, and it is the car manufacturer who has to do it.

Also, small nitpick but technically a container doesn't give full isolation compared to something like a VM.

Ok that's fair if it's targeting a non-technical audience.

But I think this will eventually be a problem solved at the OS level in a more streamlined way. I.e. there will be fine-grained permissions you need to approve to give an agent access to the system.

Reply on news.ycombinator.com