Hardening a fresh VM: a pre-use baseline and project isolation
Take a fresh cloud VM from just-provisioned to safe-to-use — then cage untrusted or model-authored workloads so a compromise can't phone home, exfiltrate, or escalate.
31 min read
Blog
Guides, experiments, and notes from the things I build and break.