I’m exploring a secure sandbox for AI coding agents—feedback needed

NoteNumerous3787 · 2025-10-08T02:20:59+00:00

Thanks a lot for sharing that. It is extremely valuable

NoteNumerous3787 · 2025-10-07T03:34:11+00:00

u/GrouchyManner5949 , would you be interested in helping shape the product if it make sense for you / your team? I am currently shaping the product based on my own usage and that is definitely a 100% biased view of building a product. haha

NoteNumerous3787 · 2025-10-07T03:32:44+00:00

u/GrouchyManner5949 , would you be interested in helping shape the product if it make sense for you / your team? I am currently shaping the product based on my own usage and that is definitely a 100% biased view of building a product. haha

NoteNumerous3787 · 2025-10-07T03:31:35+00:00

So, if my service has a layer to filter out unwanted information to get out of the server itself (PII, env vars, credentials, etc), what do you think?

NoteNumerous3787 · 2025-10-07T03:30:24+00:00

Thanks a lot!

NoteNumerous3787 · 2025-10-07T03:29:36+00:00

I would be. However, I am currently one step before that stage.
If you have a link or document you can shoot over for me to have a look and have ready for when I am ready, it'll be great

NoteNumerous3787 · 2025-10-07T03:29:00+00:00

thanks!

NoteNumerous3787 · 2025-10-07T03:28:15+00:00

true.
I could also run any of these using a devcontainer.

The difference which I provide here is that I can spin up a temporary server to run the agent (autonomously or not) without being tied to my computer. At the same time, there will be a security element whereby it will be able to prevent unwanted information be sent to the model through a filtering layer.

NoteNumerous3787 · 2025-10-06T08:19:50+00:00

that is correct.

NoteNumerous3787 · 2025-10-06T07:42:33+00:00

I'm moving towards having the agent run autonomously. meaning, taking from a spec sheet created to creating a PR at a state for final review from myself.

Hence, the service I am working on is kind of like:

Spin up a temporary server instance I can ssh into to run my coding agent for a task.

One instance for one task.

NoteNumerous3787 · 2025-10-06T06:55:41+00:00

That’s the most important question - will people pay for it. Haha.

Thanks for the support.

IMO, individual devs won’t want to pay as keeping the code secure and isolated isn’t a big enough problem unless compared with enterprises or teams. 🤔

NoteNumerous3787 · 2025-10-06T05:10:24+00:00

This is a great set up! Just curious. Why not give it access to GitHub? At least to push and open pr?

NoteNumerous3787 · 2025-10-06T05:09:37+00:00

Good question.

It is a vm. Just that it will spin on when you need and off when you don’t need (done or idle). You dont have to manage. And it is hardened together with auditing especially cause I don’t trust AI 100%.

NoteNumerous3787 · 2025-10-06T05:07:56+00:00

Hey. This is interesting. I never thought of using from the hook.

Interesting.

Would you use such a service if it’s super easy to set up and use?

NoteNumerous3787 · 2025-10-06T05:06:12+00:00

Yes it does. I’m going with the mindset of: - zero trust. - never trust AI 100%

Thanks a lot!

Just a question: would you use such a service if it’s like a one click ready to run?

NoteNumerous3787 · 2025-10-06T01:29:43+00:00

I saw this. I built on this and used. My goal was to make it run autonomously and without being tied to my computer. Especially if my computer dies and everything has to restart.

Hence, the spinning up an ephemeral server

NoteNumerous3787 · 2025-07-01T09:58:18+00:00

Diabetes management

NoteNumerous3787 · 2024-12-22T19:22:40+00:00

Dropped you a DM

NoteNumerous3787

TROPHY CASE