internally it's becoming clear based on churn in the muse binaries that they are preparing to make containers in containers in vms, where muse might not be able to "install a soup of random shit in a single shared namespace" and instead only install shit into contained "Spaces" (still above, in the thread i wish i had forked dozens of posts ago). That would be an improvement but then that means there needs to be some permissioning system for accessing shared filesystems and IPC, and muse is bad enough at handling its own VM. Looking more like the "everyone has to be a sysadmin" side of "everyone gets a VPS." And I don't think it would be good to have "go ahead and monkey around with the thing that is exactly your only security barrier" in the system prompt.