News for hackers. Stuff that matters.

A comment on IronClaw: a Rust-based clawd that runs tools in isolated WASM sandboxes. Parent comment

Re:IronClaw: a Rust-based clawd that runs tools in isolated ... by spankalee on Friday February 13, 2026 @02:50PM (#47006925)
This is very, very wrong, IMO. We need more sandboxes and more granular sandboxes.

A VM is too coarse grained and doesn't know how to deal with sensitive data in a structured and secure way. Everything's just in the same big box.

You don't want to give a a single agent access to your email, calendar, bank, and the internet, but you may want to give an agent access to your calendar and not the general internet; another access to your credit card but nothing else; and then be able to glue them together securely to buy plane tickets.

[ Parent | on HN ]
Re:IronClaw: a Rust-based clawd that runs tools in isolated ... by ramoz on Friday February 13, 2026 @02:58PM (#47007031)
You're extending the definition of a sandbox
[ Parent | on HN ]
Re:IronClaw: a Rust-based clawd that runs tools in isolated ... by NitpickLawyer on Friday February 13, 2026 @03:38PM (#47007513)
No, that's more capabilities than sandboxing. You want fine-grained capabilities such that for every "thread" the model gets access to the minimum required access to do something.

The problem is that it seems (at least for now) a very hard problem, even for very constrained workflows. It seems even harder for "open-ended" / dynamic workflows. This gets more complicated the more you think about it, and there's a very small (maybe 0 in some cases) intersection of "things it can do safely" and "things I need it to do".

[ Parent | on HN ]
Re:IronClaw: a Rust-based clawd that runs tools in isolated ... by spankalee on Friday February 13, 2026 @03:03PM (#47007094)
Not really. One version of this might look like implementing agents and tools in WASM and running generated code in WASM, and gluing together many restricted fine-grained WASM components in a way that's safe but allows from high-level work. WASM provides the sandboxing, and you have a lot of sandboxes.
[ Parent | on HN ]
Re:IronClaw: a Rust-based clawd that runs tools in isolated ... by nebezb on Friday February 13, 2026 @03:01PM (#47007066)
You’re repeating the parent commenters position but missing their point: we have isolated environments already, we need better paradigms to understand (and hook) agent actions. You’re saying the latter half is sandboxing and I disagree.
[ Parent | on HN ]