shumengya/sproutclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(coding-agent): reorder containerization patterns

Browse Source
This commit is contained in:
Vegard Stikbakke
2026-06-15 09:16:13 +02:00
parent bb959aae01
commit a851968170
4 changed files with 38 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/coding-agent/docs/security.md
View File

@@ -42,7 +42,7 @@ For untrusted repositories, generated code you do not intend to monitor closely,
Common patterns are documented in [Containerization](containerization.md):
- run the whole `pi` process inside OpenShell or Docker
- run the whole `pi` process inside a container/sandbox
- run host pi while routing built-in tool execution into a Gondolin micro-VM
- mount only the workspace paths the agent should access
- avoid mounting host `~/.pi/agent` unless the container should access host sessions, settings, and credentials