Blog
Posts about security
Seven coding-agent disasters, and which ones a separate machine would have stopped
Seven real incidents where coding agents deleted files, disks or databases, where each agent ran, and which ones a separate machine would have stopped.
Container, microVM or full VM: choosing a box for a coding agent
What containers, gVisor, microVMs and full VMs each put between a coding agent and your computer, when the agent needs Docker, and what none of them fix.
Home server, VPS or cloud VM: where to keep your coding agent
A computer at home, a monthly VPS or an hourly cloud VM for your coding agent: the cost at 4 hours a day, 8 hours a day and always on, and what can break.
VS Code on a remote machine: Remote-SSH, code-server or a terminal
Three ways to edit code on a remote machine, what each one installs and where its extensions run, and which keeps your laptop out of an agent's reach.
Why every shedix machine is a whole VM, not a pod
Why shedix gives each machine its own VM instead of a container on a shared cluster, what that gives an agent, and what it costs in boot time and density.
Give your coding agent its own machine
What a coding agent can reach on your main computer, what Claude Code and Codex permission modes and sandboxes cover, and why a separate VM is cleaner.