Canister: An Invitation to Break It and Tell Me Where It Doesn't Fit

A few months ago I posted a small note on LinkedIn about a holiday project: Canister , an unprivileged Linux sandbox for running code you don’t fully trust – AI-generated scripts, npm install , build steps from a repo you just cloned. A lot has changed since then, and I mostly stayed quiet about it. A couple of the notes here even slipped out as drafts before I meant to publish them – if you read…