scsoi
Re:Claude Duet Safety, Privacy, and Security
on Saturday October 24, 2026 @02:43AM (#50218821)
We do the filesystem side of the same problem. Instead of giving the agent a folder, map it to a real drive letter on Windows. The agent only sees its own drive, can't touch the rest. subst.scsoi.com for local, drive.scsoi.com for WebDAV. Pairs well with a screen tool like this.
Re:Ask HN: How do you sandbox your AI agent so it can't delete your fi...
on Thursday October 22, 2026 @08:00AM (#50194164)
I solved this by mapping a folder to a drive letter on Windows and pointing the AI agent at that drive. OS-level sandbox, no VM needed. I use ScsSubst (subst.scsoi.com) to make the mappings persistent. $9.99 lifetime.