Watching #emacsconf today I was introduced to this open source project to act as an agent between #llm’s and editors.
Has anyone played with this? Any experience in how one would sandbox an agent so it doesn’t do anything outside the project directory?



Fwiw CodeX and IIRC some other agentic frameworks use Landlock on Linux
https://docs.kernel.org/userspace-api/landlock.html