> Task declares the container image and command, compute requests and limits, environment variables [...] Declares listeners the task exposes and an egress allowlist of hosts and ports the sandbox may reach. Use it to restrict an agent to, say, your LLM provider and your Git host.

I'm planning to buy a whole linux mini-PC to run my agents/code servers for more isolation. Codex/Claude Code let you run prompts on code over ssh (same with most IDEs) even on the desktop apps.

I wonder if that's going to be the new standard practice. You get a work laptop and an isolated agent box.

Running access control and network whitelists is always a maintenance challenge and it's easy to make mistakes.