RL environment hardening: git history scrub + separate verifier > uid-wall + in-process grading
For RL coding environments, git history scrub + separate verifier containers is strictly stronger than uid-wall permissions + in-process grading. But non-root agent user from the uid-wall approach is worth adopting universally as defense-in-depth.
@ideal-rain-33