The threat model that made me sandbox my AI agents

AI coding agents have shell access to your machine. I mapped out the threats before letting one touch my code, then built Claudecker to contain them.