https://karamatli.com/posts/ Recent content in Posts on Ertuğ Karamatlı Hugo en © Ertuğ Karamatlı Tue, 21 Jul 2026 00:00:00 +0000 https://karamatli.com/posts/network-isolated-kvm-sandbox-ai-agents/ Tue, 21 Jul 2026 00:00:00 +0000 https://karamatli.com/posts/network-isolated-kvm-sandbox-ai-agents/ Between supply chain attacks and increasingly capable AI coding agents, you’re already running code you’ve never read, with your own privileges. Instead of sandboxing individual tools, put the whole development environment (editor, agents, containers, and all) inside a plain KVM VM that can reach the internet but has no route to the host, the LAN, or any other private address. The companion tool kvm-sandbox creates a hardened sandbox VM with one command and verifies the network boundary actually holds. To stress-test that claim, I gave an AI agent root inside one and told it to break out; it couldn’t.