Post
danielroe
danielroe.dev
did:plc:jbeaa5kdaladzwq3r7f5xgwe
I'm a big fan of workmux and its built-in sandboxing. I want to make sure that that there's a level of containment when I'm running code I've not written.
the same is true for any agent I run. it gets a read-only gh token + a network-enforced domain allow-list.
2026-09-20T09:54:13.862Z