2 posts tagged “security”.
10 min
Worktrees stop an agent from stomping on your branch, but they will not stop it from reading your SSH key. Here is the OS-level sandbox layer that does, and how Watchfire picks the right backend on each host.
11 min
Two secret stories live inside the daemon — a Markdown file that gets injected into the agent's system prompt, and an OS keyring that holds the bot tokens for every integration. The thread that ties them together is a write-only wire: a gRPC contract that lets a client save a credential but never read one back.