Keeping AI agents like OpenCode as separate environment (in Docker)
Why should you keep your AI agent in a separate environment? For security!
Anthropic
Keeping AI agents like ClaudeCode as separate OS user
Why should you keep your AI agent as a separate OS user? For security!