OS Sandboxes Draw Boundaries. This Article Is About What Happens Inside Them.


In Part 2A, we covered OS-level sandboxing — bwrap, gVisor, and Seatbelt constraining agent processes at the kernel level. Kernel isolation is necessary but not sufficient. It can't distinguish a legitimate write("app.ts", code) from a malicious write("app.ts",...