Correct way to agents?

[John Carlson]

This is a very good video about using bearer tokens outside docker sandboxes (sbx command) and petnames inside it so the agent doesn’t have access to your GitHub credentials.   I don’t know if that means that your agent can’t do nasty things, but if you put the agent in a sandbox, it might be easier to recover from an outer level:

https://youtu.be/7Z7ID5BbZU4

So I guess that petnames are a form of delegation.  I am not sure if petnames can have petnames.

Enjoy!

John