Safe Repository Access for AI Agents with bwrap and sshfs
I run AI agents in a dedicated VM. The agents need access to my local git repositories so they can read and modify code, but I don’t want them to be able to push to remotes, read my SSH keys, or touch anything outside the repos directory — even if an agent somehow gains root in the VM.
Read more...