Why sandboxing coding agents is harder than you think (opens in new tab)

Permission systems, Docker sandboxing, and log file secrets - why current approaches to securing coding agents fall short and what we might need instead.