Fifteen supply-chain attacks vs four AI coding agents

Before we start, the obvious caveat. Sandboxing your agent (container, no ~/.aws/credentials , no ~/.ssh , restricted network, separate user, ephemeral filesystem) beats any prompt-level rule. Do that first. The rules below are for what comes after. Sandboxes don&rsquo;t fix everything. The agent might have deploy creds to deploy with, paid API keys to call paid APIs, read access to your actual…