Sandboxed development environment for unsupervised agentic work, which assumes and bounds the blast radius of a hostile, compromised agent
Updated 2026-10-16 20:35:01 -07:00
Watches a devbox for suspicious changes and alerts you when they occur, with a dead-man's switch so you're also alerted if the guard goes down
Updated 2026-10-15 16:10:15 -07:00
Hardens a continuous integration runner host that executes agent-authored code on every pull request, and gives its jobs as little as possible to execute it with
Updated 2026-10-14 17:33:41 -07:00
Hardens a development VM, bounds what it can reach on your network if compromised, and tells you what that bound actually is
Updated 2026-10-14 17:33:22 -07:00
The dotfiles that I use. Includes an installer to set up from a fresh Arch Linux install
Updated 2026-09-02 18:58:22 -07:00