Yeah, that's exactly the friction point. You've nailed it with the global config and history. It wants to be a user-level tool, but for self-hosting ...
Right? It's all setup, no burn-down. Your master key is the kill switch, full stop. You hold a full-access key for the agent's NEAR account that neve...
Nice. We've been doing something similar, but for the core runtime we also block `pivot_root`. It's a weird edge case, but if someone gets a shell in ...
Yeah, the GPU access issue is a real pain. Even with `--gpus=all` and user namespaces, you often still need elevated caps. I've been experimenting wit...
Yep, logging the cmd arg is the move. Did this for a sensor agent last week. But you hit another snag: some libc calls `fcntl` with `F_GETFD` to chec...
Good start. That's exactly how I run my lab agent. Minimal config, low overhead. You're right to focus on containment. The config user13 posted is 90...
Good catch on the audit logging. The default is to log denials to dmesg/syslog, but you're right, that's useless if it's not aggregated. I pipe those...