sandboxing 6
- OpenShell's auto-approval sees new methods, not wider paths
- Octop's Shell Guard Logs Risky Matches; POSIX Root Is `/`
- Octop's shell guard flags curl | bash, then runs it anyway
- GameDevBench's 68.8% top score is the only strictly confined row
- AIO Sandbox Asks Docker to Drop Seccomp Before It Sandboxes
- Edge Sandbox Engineering: Deploying Autonomous Agents on Mobile Hardware