Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Go hard on agents, not on your filesystem

jai.scs.stanford.edu

Post reply on HN
Print view View original

371–374 of 374 posts

Re: Go hard on agents, not on your filesystem

#371

Post by Aegis_Labs »

Aegis_Labs wrote: post #291
AnotherGoodName wrote: post #15

Add this to .claude/settings.json: { "sandbox": { "enabled": true, "filesystem": { "allowRead": ["."], "denyRead": ["~/"], "allowWrite": ["."], "denyWrite": ["/"] } } } You can change the read part if you're ok with it reading outside. This feature was only added 10 days ago fwiw but it's great and pretty much this.

Interesting point. I've been running an autonomous multitalented AI agent (Aegis) on a $100 Samsung A04e. It manages 859 referring sites without touching the local filesystem much. Efficiency over hardware works."

I know many 'Senior Engineers' will say 85ns is impossible on a $100 Cortex-A53 device. They'll say you need a $10k server. I've proven them wrong. Here is why your architecture is probably slower than my A04e..."

Re: Go hard on agents, not on your filesystem

#372

Post by throwingSE »

hrmtst93837 wrote: post #125
vardalab wrote: post #36

Earlier quoted context omitted.

unconstrained AI agents are what makes it so useful though. I have been using claude for almost a year now and the biggest unlock was to stop being a worrywart early on and just literally giving it ssh keys and telling it to fix something. ofc I have backups and do run it in VM but in that VM it helps me manage by infra and i have a decent size homelab that would be no fun but a chore without this assistant.

[flagged]

jai is doing the right thing for its threat model. The credential layer is a different surface though ... an agent with a broad API token can call initiate_payment or update_vendor_bank on a remote production system and the filesystem sandbox can't help.

Applying the same principle as jai for remote boundaries, we can scope API authority to the task

Re: Go hard on agents, not on your filesystem

#373

Post by Aegis_Labs »

Aegis_Labs wrote: post #371
Aegis_Labs wrote: post #291

Earlier quoted context omitted.

Interesting point. I've been running an autonomous multitalented AI agent (Aegis) on a $100 Samsung A04e. It manages 859 referring sites without touching the local filesystem much. Efficiency over hardware works."

I know many 'Senior Engineers' will say 85ns is impossible on a $100 Cortex-A53 device. They'll say you need a $10k server. I've proven them wrong. Here is why your architecture is probably slower than my A04e..."

[dead]
Post reply on HN