Disposable, isolated local sandboxes for AI agents like Claude Code, Codex, OpenCode that need safe, unattended execution.
add : noctalia v5 + niri
Herdr keeps coding agents in persistent terminal workspaces, shows which ones need attention, and exposes the whole system through a CLI and API.
FreeBSD for agentic workload
Complete OS, no Linux distro hell
Open Source, unlike Mac or Win
POSIX compliant
Excellent documentation
Native zfs, pf and jails to effectively sanitize agents
And as bonus no systemd bloat
Stéphane Graber : That's quite the busy release with a lot of new features across the board (GPU accelerated VMs, remote port-forwarding, UEFI NVRAM configuration, ...) as well as a lot of bugfixes, performance improvements and security fixes.
Persona 3 Reload Quickshell theme for Hyprland
fun with waveshare 11.9 wide screen + wayland cage , foot terminal & terminal text effects
Flux 3 is here
$0.53 per second at 1080p
or around 18 seconds for $10
replicate.com/black-forest-labs/flux-3
create ssh key on macos 26+ and add to keychain
$ ssh-keygen -t ed25519 -a 100 -C "nico@macOS"
$ ssh-add --apple-use-keychain ~/.ssh/id_ed25519
When UI Goes Wrong
grumpy.website
IncusOS or NixOS for Incus host ?
Wayland Protocols table
Flux 3 - liminal
kimi k3 no safeguards
kimi is the pentester
14$ api to pwned a shell
Agent Sandboxes
how to create millions of them
Seatbelt: the macOS Sandbox
Landlock
seccomp
cgroups
Namespaces and Bubblewrap
Virtual Hardware: Firecracker
Virtual Kernel: gVisor
Customer Isolation
source : mrinal.com/articles/agent-sandboxes
Kimi K3
Technical report of kimi k3 ... maths :']
Nix flakes
development shell (HUGO)
