kstenerud/yoloai on Hacker News

…file, and then put Claude specific stuff (mainly info about hooks and scripts) after that. https://github.com/kstenerud/yoloai/blob/main/CLAUDE.md

comment by kstenerud · 2026-08-20 · in Feature Request: Support AGENTS.md

…is writing code is: Either you adhere to the rules, or you mark an exception with a valid reason. https://github.com/kstenerud/yoloai/blob/main/docs/contribut... Poor defaults break systems by a thousand cuts. They seem to make sense when…

comment by kstenerud · 2026-08-11 · in Go is an ideal language for AI-assisted software engineering

I wrote one that has both of those: yoloAI (MIT, Go, single binary, no login). https://github.com/kstenerud/yoloai Outbound firewall is `--network-isolated`: egress is denied except the agent's own API endpoints plus domains you allow,…

comment by kstenerud · 2026-08-10 · in Docker Sandboxes – Disposable, isolated sandboxes for AI agents

…so its quite similar using that. My main issue would be that network access is allowed by default. https://github.com/kstenerud/yoloai Several other projects listed here use libkrun which is an alternate implementation that works with…

comment by gregwebs · 2026-08-10 · in Docker Sandboxes – Disposable, isolated sandboxes for AI agents

…whether to apply them. - gitignored files never get copied in. The agent never sees them. - FOSS https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-08-06 · in Humans missed 1 in 3 threats approving AI agent commands across 40k game runs

…glue is where all the chaos ensues. Here's a small sample of the crazy shit you have to deal with: https://github.com/kstenerud/yoloai/blob/main/docs/contribut... And that's if you're actually following the proper procedures (which are…

comment by kstenerud · 2026-07-16 · in I tricked Claude into leaking your deepest, darkest secrets

…in the backends that will eventually trip you up. The list is quite large and continually growing: https://github.com/kstenerud/yoloai/blob/main/docs/contribut...

comment by kstenerud · 2026-07-15 · in I tricked Claude into leaking your deepest, darkest secrets

…you want to use. Defaults to a ~/.yoloai dir for config/data, but you can point it anywhere. - FOSS https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-07-15 · in I tricked Claude into leaking your deepest, darkest secrets

Yup, I built one! https://github.com/kstenerud/yoloai You can even run simulators in it if you choose the Tart backend.

comment by kstenerud · 2026-07-13 · in Building and shipping Mac and iOS apps without opening Xcode

…at all. - You pick the security backend to match your needs (containers, VMs, etc). - It's FOSS. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-07-13 · in Grok CLI uploaded the whole home directory to GCS

…you want to use. Defaults to a ~/.yoloai dir for config/data, but you can point it anywhere. - FOSS https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-07-13 · in Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop

Have you seen https://news.ycombinator.com/item?id=48892015 and yoloai? https://github.com/kstenerud/yoloai Seems like both projects are following very similar approaches.

comment by NortySpock · 2026-07-13 · in Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop

…which files/dirs it has access to. It's a MASSIVE time saver, and I use it as my daily driver. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-07-13 · in Ask HN: What Are You Working On? (July 2026)

You might want to give https://github.com/kstenerud/yoloai a try, then. Runs agents in tmux in sandboxes.

comment by kstenerud · 2026-07-08 · in Herdr: One terminal to rule them all

…access. Containment can be container or VM level, with a Linux or MacOS contained environment. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-07-04 · in Ask HN: What are you working on? (July 2026)

I use this: https://github.com/kstenerud/yoloai yoloai new mysandbox . # Create a sandbox yoloai attach mysandbox # Attach the sandbox to the current terminal ... (^b^d to disconnect) # It's using tmux to keep the agent alive yoloai diff…

comment by kstenerud · 2026-06-28 · in A way to exclude sensitive files issue still open for OpenAI Codex

…security, use a sandbox. Nothing else will do. I do AI sandboxes (FOSS, free forever, no rug pull): https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-06-28 · in A way to exclude sensitive files issue still open for OpenAI Codex

…haven't quite figured out how I want to deploy it, and anyways I haven't found an agent I like yet. https://github.com/kstenerud/yoloai

comment by NortySpock · 2026-06-25 · in Computer use in Gemini 3.5 Flash

…mybugfix # Bring out commits and/or uncommitted changes. $ yoloai destroy mybugfix And it's FOSS: https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-06-14 · in Ask HN: What are you working on? (June 2026)

…the sandbox approvals (I don't want to give it "dangerous" access to my entire mac). This is what https://github.com/kstenerud/yoloai does. Sandboxing using Docker, Podman, containerd (linux only), seatbelt (macos only), tart (macos only),…

comment by kstenerud · 2026-06-14 · in AI coding at home without going broke

…even the new apple containers (which are VERY nice). Not even ENV leaks through. And it's FOSS: https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-06-12 · in Claude Fable is relentlessly proactive

…changes out ala git diffs or commits. It's a MASSIVE time saver, and I use it as my daily driver. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-06-08 · in Ask HN: What are tools you have made for yourself since the advent of AI?

You could just use https://github.com/kstenerud/yoloai to keep it contained while allowing all permissions. That's how I code with AI now. Can't imagine going back.

comment by kstenerud · 2026-06-06 · in I'm waiting for Claude to rm rf my computer

…yeah? This is what I've been arguing for a long time now, and it's the primary reason why I wrote https://github.com/kstenerud/yoloai and use it as my daily-driver. I can't imagine running an agent without it. The environment layer is…

comment by kstenerud · 2026-06-04 · in The ways we contain Claude across products

This is what yoloAI does, using docker, podman, kata, containerd, seatbelt, and tart for sandboxing. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-06-01 · in Starting a VM from a macOS sandbox for AI agents

You might want to check out https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-05-28 · in Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue

I looked through and there's a bunch of stuff that's in poor coding practice. E.g. https://github.com/kstenerud/yoloai/blob/main/internal/fileu... <- that recursively creates directories, but will only change permissions on the innermost…

comment by everforward · 2026-05-19 · in The last six months in LLMs in five minutes

…up in your face. Is it doing it to the same scale? No - it's a single user app. But have a look at https://github.com/kstenerud/yoloai/blob/main/docs/dev/backe... and you'll see the kind of shit a project like this has to handle. It's not…

comment by kstenerud · 2026-05-19 · in The last six months in LLMs in five minutes

…less pretty). Once I get around to fixing this, it will probably result in another section in https://github.com/kstenerud/yoloai/blob/main/docs/dev/backe... Edit: Looks like it's the terminal. That's a rabbit hole for another day. Running…

comment by kstenerud · 2026-05-19 · in The last six months in LLMs in five minutes

…I've had the opposite experience of yours, generating very high quality work using Claude (such as https://github.com/kstenerud/yoloai ). Just in dealing with all the bugs and idiosyncrasies in the technologies I'm using, the agent has…

comment by kstenerud · 2026-05-19 · in The last six months in LLMs in five minutes

…you want), no access to your workdir until you apply. You can also easily restrict network access. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-04-08 · in Slightly safer vibecoding by adopting old hacker habits

…code such that you can choose your level of security (docker, gvisor, kata, firecracker). https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-04-07 · in Docker and the Linux Kernel Isolate Your Agent, and Where They Don't

…changes before they land. You also control network access. Free, open-source, no account needed. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-04-07 · in Launch HN: Freestyle – Sandboxes for Coding Agents

…changes to keep. I use it for all my agentic work, and couldn't go back to using Claude without it. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-04-04 · in Ask HN: What Are You Working On?

This is why I use yoloAI ( https://github.com/kstenerud/yoloai ). $ yoloai new bugfix . -a --network-isolated --agent claude Now I have a claude code session that only has a COPY of my work dir, and can't reach anything over the network…

comment by kstenerud · 2026-03-30 · in Claude Code runs Git reset –hard origin/main against project repo every 10 mins

…last words ;-) I've already shipped this and use it myself every day. I'm the author of yoloAI ( https://github.com/kstenerud/yoloai ), which is built around exactly this model. The agent runs inside a Docker container or containerd vm (or…

comment by kstenerud · 2026-03-28 · in Go hard on agents, not on your filesystem

…attempt against #1 (guardrails, permissions, etc), and nothing against #2. It's why I use https://github.com/kstenerud/yoloai for everything now.

comment by kstenerud · 2026-03-26 · in “Disregard That” Attacks

…part of the agent process, and thus subvertable by the agent. I took a different approach with https://github.com/kstenerud/yoloai - The agent is put entirely in a container or VM sandbox (docker, podman, gvisor, kata, seatbelt, tart) -…

comment by kstenerud · 2026-03-26 · in Claude Code auto mode: a safer way to skip permissions

I wrote https://github.com/kstenerud/yoloai to sandbox agents so that they can do whatever they want inside (with --dangerously-skip-permissions), including write, compile and run code to perform their tasks. It also supports MCP…

comment by kstenerud · 2026-03-25 · in Ask HN: Is anyone here giving their MCP server a code execution environment?

…sandboxing, not in-process. The attacks are only going to get worse. That's why I'm building https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-24 · in Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

If you're gonna do that, make sure you're sandboxing it with something like https://github.com/kstenerud/yoloai or eventually you'll have a bad time!

comment by kstenerud · 2026-03-24 · in Claude Code Cheat Sheet

…so I could sandbox it up properly and control EXACTLY what comes out of that sandbox, diff style. https://github.com/kstenerud/yoloai I can't go back anymore. Going back to a non-sandboxed Claude feels like going back to a non-adblocked…

comment by kstenerud · 2026-03-19 · in A rogue AI led to a serious security incident at Meta

…my next prompt cycles as it churns out code. For example, this project was entirely written by LLM: https://github.com/kstenerud/yoloai I never wrote a single line of this code (I do review it, of course, but even then the heavy lifting…

comment by kstenerud · 2026-03-16 · in LLMs can be exhausting

Use yoloAI and you get the full benefit of --dangerously-skip-permissions with none of the risks. https://github.com/kstenerud/yoloai Every time I use a bare Claude session (even with /sandbox) without using yoloai, it feels like using a…

comment by kstenerud · 2026-03-13 · in Shall I implement it? No

…My agents always run with —-dangerously-skip-permissions now, but they can no longer do any harm. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-13 · in Shall I implement it? No

▲ 1

Show HN: YoloAI: Sandboxed agent, no permission fatigue, diff/apply workflow

story by kstenerud · 2026-03-12 · 0 comments

…Seatbelt, and Tart backends (I've even had it build an iOS app inside a seatbelt container). https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents

If you're looking for one better documented and tested, you might like https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents

…Mac), Seatbelt (Mac), Tart (Mac) Everything's contained in a single go binary. Just build and run. https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-09 · in Ask HN: What Are You Working On? (March 2026)

…"yes" to everything, and thus lose whatever benefits its sandbox had. It's why I wrote yoloAI: https://github.com/kstenerud/yoloai

comment by kstenerud · 2026-03-06 · in A GitHub Issue Title Compromised 4k Developer Machines