curriculum-project-hub/.scratch/saas-production-readiness/issues/16-confine-agent-and-protect-credentials.md

Confine the agent runtime and protect service credentials

Type: task Status: claimed

Question

Make the real Claude SDK/Bash execution surface uphold AgentFileOp.Authorized: deny sibling tenant workspaces and service files, expose only the minimum safe process environment, use SDK credential protection for secrets, and add an actual Linux sandbox test proving another workspace and every non-provider credential are unreadable while required tools still work.