"Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't."
This story is from 2026-08-27. It is preserved in the archive; the latest stories are on the live feed.
I gave Claude Code access to a project folder and asked it to read .env. It tried ls, find, cat, and the MCP filesystem tool. All four blocked, and every attempt is in a hash-chained log I can verify offline. Deny-by-default on tool calls, kernel sandbox on subprocesses, outbound requests checked b…
Read the full story at r/learnmachinelearning ↗
Timeline · 1 report
- 2026-08-27 17:57 · r/learnmachinelearning
"Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't."