Hacker News Reader

Honest question: which startups are trying to write a sandboxed-by-default easy to configure bash meant to be safely used by agents?

It's not "bash", it's containers/VMs/whatever that are isolated from the host and run the agent, which can access a shell to do work.