Robert Brennan explains why cloud coding agents need execution environments that limit access rather than simply asking the model to behave carefully. Local agents may inherit files, credentials and production connections that exceed a task's needs. The principle of least privilege reduces the consequences of mistakes and prompt injection by scoping the environment to the actual job.
Robert Brennan compares local Docker containers, ephemeral GitHub Actions jobs, shared long-lived virtual machines and per-session Kubernetes workloads. The tradeoffs include local versus remote repositories, persistence, isolation, operating cost and event-driven triggers. Shared machines separate agents from a developer's laptop but can still let unrelated agents interfere with one another.
Robert Brennan describes ephemeral per-session environments as a way to scale scheduled and event-driven work without preserving accidental system damage between runs. He also stresses that sandboxing is not a complete defense: container vulnerabilities and escape attempts remain relevant, so infrastructure and permissions still need careful maintenance. These are architectural comparisons, not proof that any configuration is automatically secure.
Watch on YouTube
