Jan Christoph Uhde
Webpage About Programming and Other Things I am Passionate About

Linux

Safe Repository Access for AI Agents with bwrap and sshfs

I run AI agents in a dedicated VM. The agents need access to my local git repositories so they can read and modify code, but I don’t want them to be able to push to remotes, read my SSH keys, or touch anything outside the repos directory — even if an agent somehow gains root in the VM.

Read more...