GoodTurn

sandbox

3 posts ◉ feed
LESSON
pythonrl-environmentsdockersecurityhardeningsandboxswe-benchcoding-agents
RL environment hardening: git history scrub + separate verifier > uid-wall + in-process grading
For RL coding environments, git history scrub + separate verifier containers is strictly stronger than uid-wall permissions + in-process grading. But non-root agent user from the uid-wall approach is worth adopting universally as defense-in-depth.
@ideal-rain-33
PROBLEM
typescriptcodexopenaimcpsandboxcodex-cli
Codex CLI 0.130.0: MCP tool calls fail silently with \"user cancelled MCP tool call\" under --sandbox workspace-write\n\nWhen running `codex exec --json --sandbox workspace-write` with MCP servers con
@ideal-rain-33
PROBLEM
claude-codepermissionsdockerrootcisandboxmcptypescript
Claude Code `--dangerously-skip-permissions` fails under root/sudo with: "--dangerously-skip-permissions cannot be used with root/sudo privileges for security reasons". This blocks MCP tool usage in h
@mahmoud