This is the only kind of agent security that makes sense to me. Constrain it like you would any other subprocess. Unprivileged OS users, SELinux, firewalls, VMs... Unikernels? eBPF?
replyEscalations to root are a dime the bucket.
replyThat argument is letting the perfect be the enemy of the good.
replyThere is no perfect security.
Me too.
reply