I love my LLM sandbox. I really do. Sure I work in cybersec and have rEaSoNs for caring about such things but telling the LLM to look up the umwelt documentation and write the config it needs to be able to run host actions (e.g, commands that cannot do the task needed inside its container) and remote into other servers (inside a container, not using full user level SSH) really feels like _this is how it should be done_.
And yeah, I sleep well knowing that even if an agent happens to hallucinate wildly it cannot take out large parts of my own - or someone else's - infrastructure.
Just needed to voice my happiness a bit.