A deep dive on agent sandboxes
The modern generation of coding agents are powerful in part because of their access permissions. They have a few built-in functions for the most obvious operations (writing files, editing strings) but other than that they mostly generate what they need adhoc. Their bash tool is by far their most powerful because it's the most expressive. You can run some adhoc python to test out some logic, run a compilation pass, or curl a website. It's turning complete for gosh sake.
It's also by far the most ...
Read more at pierce.dev