bubblewrap

Docker Compose, Nix, devcontainers, microVMs — how automated provisioning works, and where the boundary moves when an agent needs a workspace.

Your file manager parses downloads before you touch them. Here's what that means for your security — and what you can actually do about it.

The agent process is moving off your laptop. Local appliance, SaaS workspace, or your own VPS — three answers, no consensus.