Post #2161226

Without metaphors, I find it hard to understand how a utility that can act in unpredictable ways can have no sandbox measures in the first place imposed by the operator. Not everyone has a threat model where an agent could attempt using CPU bugs to escape a Xen VM, but a mere QEMU VM with a shared folder, with only the access to the important data per project, would be a step in the right direction.