What we need is true application isolation even in the command line. Treat Terminal as privileged access, not something any app can just command. Sandbox non-app store apps as well.
Whenever I ask Claude to vibecode macOS native apps for me, I always request the apps to be sandboxed. Agents know how to sandbox the apps; just ask. And you can verify it without reading any code.
Call me a paranoid but I'm afraid of the harness itself, not the apps it generates. You can see lots of people being concerned with Deepseek Harness being Chinese, but I share the same sentiment towards all AI-based software that can run unsandboxed on my computer.
etatester · · focus · HN ↗
kccqzy · · focus · HN ↗
etatester · · focus · HN ↗
chrisjj · · focus · HN ↗