Run an autonomous AI coding agent — opencode, claw-code, or Claude Code — under controls it cannot disable. Fedora bootc + rootless Podman appliance with audited egress proxy, kernel-enforced nftables isolation, root-owned prompt-injection-hardened instructions, and service-gator-mediated external access.
-
Updated
May 25, 2026 - Shell