hn • r/hackernews
Comment on: Show HN: Isolade, a local-first coding agent workbench with secretless microVMs
I can only say the same: "Most people run their coding agents directly on the host system."
And the problem between the host system and the microVM approach is the same, only that the host system is not isolated. But in both cases, I want the secrets to be undiscoverable by the AI.
I use YubiKeys for SSH auth, so the AI could not use SSH without my consent. But for all other credentials like .files I almost saw the AI figure out how to use them without my consent. So your idea is good, but let's think about a bearer token for an API: how could an API use that without seeing the content of the