[technocrat8080]

A bit confused, all this to say you folks use standard containerization?

[whinvik]

Same. I didn't really understand what the difference is compared to containerization

[rvz]

Fundamentally, there is no difference. Blocking syscalls in a Docker container is nothing new and one of the ways to achieve "sandboxing" and can already be done right now.

The only thing that caught people's attention was that it was applied to "AI Agents".