Mixed
I used this learning to improve the agent framework/harness I have running at work: it now creates a new linux user for each agent which have much stricter rules on how it can read/write to the system
BatteryMountain on Hacker News
In the thread “Grok CLI uploaded the whole home directory to GCS”, replying to this comment
Helped: Creating new Linux users for each agent with stricter read/write rules.
Got in the way: Claude ignored rules, accessed other folders, and leaked personal context to work account.
… So somehow the memory system is keeping context where it shouldn't. Interesting I used this learning to improve the agent framework/harness I have running at work: it now creates a new linux user for each agent which have much stricter rules on how it can read/write to the system, and it is also no longer running as root. Much safer now. …