Can I use this as a generic app permissions boundary or do I have to somehow fake it as an "agent"? We are well past the point where I need to be able to lock down that my music player has no ability to read my SSH keys or whatever.
Naturally, this will be gated to corporate customers - the plebs do not get access to better security unless they pay for a top tier license.
FANTASTIC question here. I've been locking down agents by running them as untrusted users (mostly linux here) as even docker boundaries aren't really great. Firecracker is a step in the right direction (older tech, sure, but useful). I really want a local hashicorp-like vault that I can give agents specific access permissions and it can take forever to review and manage those access boundaries.
Naturally, this will be gated to corporate customers - the plebs do not get access to better security unless they pay for a top tier license.
I wonder if I will be able to integrate this with dev containers somehow, so my dev container could run in stricter isolation.
https://code.visualstudio.com/docs/editing/workspaces/worksp...
Maybe you use GitHub codespaces?