Re:Show HN: Self-improving sandboxed agent with memory and s...
by byalphas on Saturday April 11, 2026 @03:41PM
(#47733384)
How does this compare to just using systemd's sandboxing? ProtectSystem=strict, PrivateDevices, RestrictNamespaces etc. give you a pretty solid sandbox for any long-running daemon without extra tooling. Genuine question — I've been relying on systemd hardening for my own projects and wondering what I'm missing.