An agent nuked half an Obsidian vault; author proposes sandboxed tool execution
pauliusztin · reddit · 2026-08-19
A Redditor's Claude Code session ran a cleanup command inside their Obsidian vault and deleted half their notes—Obsidian Sync backups were the only thing that saved 2 years of work. Full VM isolation worked but destroyed UX (losing conversations, config, and memory on every switch), so they propose a middle path: keep the agent harness local as a control plane, and sandbox only the computer-use tools (read/write/edit/bash) behind a sandbox executor so tools never know where commands run. Execution backends can be swapped freely—local Docker/Podman or remote Modal sandboxes—enabling GPU-backed sandboxes (e.g. renting 8xB200 on Modal) and swarms of subagents each in its own remote sandbox. The author admits for ad-hoc supervised sessions the friction outweighs the risk and still runs unsandboxed, asking the community how they handle it.
More from coding & agent
- СДАМ ГИА MCP Server Enables LLMs to Retrieve Exam Problems and Solutions — modelcontextprotocol · 2026-08-19
- Gate News MCP Integrates Crypto News, Events, and Sentiment — modelcontextprotocol · 2026-08-19
- Portable, Versioned Knowledge Bases: Solving Real Problems or RAG with Extra Steps? — Rebootz · 2026-08-19
- Easy Agent Open Sources TypeScript Recreation of Claude Code — tom_doerr · 2026-08-19
- Dev Migrates Entire Business to Grok Bot Workflows, Replacing ChatGPT — ns123abc · 2026-08-19
- Dev Tests Cursor Agent: Slower Tool Calling, Lags Behind Codex — NielsRogge · 2026-08-19