The DseWiki incident shows why read-only web access must be defined by side effects, not HTTP method names. Here is what the public evidence proves.
AI Agent Sandbox 的持久化语义取决于生命周期动作。本文用五层状态模型核验文件、内存、快照、外部存储、连接与副作用。
AI agent sandbox persistence varies by lifecycle action. Use this five-layer model to verify files, memory, volumes, connections, and side effects.
AI coding agents may execute dependencies before review. Build a fail-closed pre-install gate for package identity, source, version, hashes, and scrip