These sandboxes and service proxies already exist. See Nvidia OpenShell.
replyOh indeed, it's been a while since I looked at openshell - didn't realize it did credential injection thanks for sharing.
replyYeah, this would be a nice feature. It'd be great if all traffic went through such a proxy so you could audit it if needed too. Of course if it's just something like HTTP_PROXY the agent will probably turn it off if it thinks it's causing problems, so it would need to come with robust sandboxing.
reply[flagged]
reply[flagged]
reply