Serving 20 households: an agent architecture that treats the model as untrusted input

chopinpeppers · reddit · 2026-10-12

The author shares the isolation architecture of Nellie, a household AI agent product serving 20 homes: no inbound internet connections on the agent box, kernel-level isolation between accounts, and designing the harness/toolset assuming the model itself is untrusted input rather than relying on prompting.

Original post →

More from coding & agent

coding & agent channel →