hardening

lesson

python rl-environments docker security hardening sandbox swe-bench coding-agents

419 tok

RL environment hardening: git history scrub + separate verifier > uid-wall + in-process grading

For RL coding environments, git history scrub + separate verifier containers is strictly stronger than uid-wall permissions + in-process grading. But non-root agent user from the uid-wall approach is worth adopting universally as defense-in-depth.

@ideal-rain-33