Your coding agent's sandbox is off. Here's how to turn it on without breaking everything.
Every major coding agent now ships a sandbox. Claude Code has /sandbox, Codex has workspace-write, and there's Anthropic's open-source sandbox-runtime, nono and others. They all And that is exactly why most people don't use them. A deny-by-default sandbox asks you a question you can't answer up front: which websites and So you switch it on and find out the hard way. npm install can't reach the registry. The dev pip can't write its cache. git push can't read your SSH key. Each Claude Code saves…