AWS Kiro boxes its AI coding agent in an OS-enforced sandbox on your laptop
shashib · x · 2026-10-15
AWS's Kiro now runs its AI coding agent's commands inside an OS-enforced sandbox (Seatbelt, bubblewrap, AppContainer). The agent can only write to the project folder and temp space and reach approved domains; key folders like /.ssh and /.aws are kernel-blocked even if the agent scripts around it. The author argues this beats per-step human approval since protection no longer depends on someone watching.
Related event: AWS Kiro adds OS-level local sandbox to isolate AI coding commands(2 posts)→
More from coding & agent
- Agent 记忆一年进化：从静态 CLAUDE.md 走到「做梦」 — mcraddock · 2026-10-15
- patio11 on multi-agent dev: clearly the future, and we'll buy so much inference — IgorCarron · 2026-10-15
- AIPOCH launches .science format bundling code, data and AI chats into portable research sessions — Med1_Ai · 2026-10-15
- shwarm.org: like a swarm of agents, but with humans in the loop — allisonmaybe · 2026-10-15
- Faceplugin releases free open-source face recognition SDK with full on-premise pipeline — tom_doerr · 2026-10-15
- How production Text-to-SQL systems catch semantically wrong queries that run just fine — Fun-Following-1723 · 2026-10-15