Building Agents that Don't Break Themselves fly.io
Daniel Botha: keep an agent’s control loop on a durable machine but run shell commands somewhere disposable, so it can’t delete the ground it’s standing on. An agent told to “clean up old migrations” ran rm -rf on core system paths; a checkpoint made recovery take nine seconds.