SELF-CHECK

How contained is your agent?

Contain it before it runs0 / 12

Treat this agent as untrusted code with your keys. Fix sandbox, egress and credentials first, because they carry the most weight.

It runs in a sandbox with no access to the host filesystem
Network egress is default-deny, with an allowlist at DNS or proxy
Credentials are scoped to one task and expire on their own
Nothing it holds can delete production data
A monitor outside the agent's process watches its actions
A human approves deletes, payments and outbound sends
Logs are append-only and the agent can't edit them
One switch revokes its credentials and stops it within minutes