#ai-jail
6 posts
2026 - July
3 posts2026 - May
1 post2026 - March
1 post2026 - January
1 post2026 - July
3 postsAI-Jail: Security Update, Docker Goes Opt-In
Issue #88 proved the Docker socket inside ai-jail gave any agent root on the host. In v1.16.0 the passthrough went opt-in. The flaw, a hands-on demo, best practices, and why Podman was born from this criticism.
What's New in My AI-MEMORY: Switch AI Agents Without Losing the Session
ai-memory run keeps the same programming session while switching among Claude Code, Codex, and other harnesses, with searchable workstreams and integration with ai-jail and ai-usagebar.
How Do I Protect Myself From My Agents Deleting My Stuff?
LLMs deleting files from famous people made headlines this week. In five months of heavy use, in YOLO mode, it never happened to me. But I don't trust them either: BTRFS snapshots, restic backups, sandboxing and discipline.
2026 - May
1 postAkita's AI Tips and Toolkit: ai-jail, ai-memory, ai-usagebar
After more than 600 hours with coding agents, Akita brings together tools like ai-jail, ai-memory, ai-usagebar, and ghpending, and argues for testing, backups, refactoring, and disciplined engineering.
2026 - March
1 postai-jail: Sandbox for AI Agents — From Shell Script to Real Tool
ai-jail is a Rust tool that wraps bubblewrap (Linux) and sandbox-exec (macOS) to safely run AI coding agents like Claude Code, Codex, OpenCode and Crush in a sandbox.
2026 - January
1 postAI Agents: Locking Down Your System
I show how to isolate coding agents with Bubblewrap: the jail leaves only the project writable, hides the rest of the system, and mounts only what is needed, reducing the risk of destructive commands.