Reading up on seccomp

1 deep · digging since feb 20

Implementing a secure sandbox for local agents
Cursor built OS-level sandboxes for coding agents, reducing approval prompts by 40% via Seatbelt on macOS, Landlock+seccomp on Linux, and WSL2 on Windows.