Hacker News new | ask | show | jobs
by kxbnb 158 days ago
Love the security-first approach with Docker sandboxing - that's often an afterthought in agent wrappers. The BYOK model is compelling too for teams with compliance requirements.

Curious: how are you thinking about policy enforcement for what the agent can actually do within the sandbox? Like limiting which MCP tools it can call or what parameters are valid?

We're working on governance/guardrails for MCP pipelines at keypost.ai - would be interested to explore if there's complementary overlap. Congrats on shipping!

1 comments

Thanks!

That’s a good callout. So far we are replying on the model to reliably follow the MCP definitions and scopes.