I was delaying it but one day Codex+GLM went ahead and did things in my ~/.dotfiles folder which I had granted only READ access for. I asked and I was given a reason which I didn't understand and didn't really want to. Right then I used sandbox-exec/safehouse (macOS) and tightened every harness installed (and the one not even installed, lest I install it later and forget to add/track them in the sb zsh init script).
But I am not satisfied. I am trying to find a really lightweight container/VM for macOS that eats very less RAM on its own and expands as needed. Because I really don't want to run an agent outside a container on my mac.
But I am not satisfied. I am trying to find a really lightweight container/VM for macOS that eats very less RAM on its own and expands as needed. Because I really don't want to run an agent outside a container on my mac.