credential-isolation

Episodes (3)

Trajectory notes

• 2026-08-29T15:32:42Z: forkbench-agent-credential-broker closed (faded) — SiloOS and the SiloOS development project already specify the core pattern: an untrusted agent receives bounded capabilities through a trusted broker rather than reusable credentials. Forkbench is another claimed implementation
• 2026-08-13T09:34:41Z: dirblock-envblock-agent-guards closed (faded) — Dirblock and envblock independently implement Scott’s structural-containment position: enforce filesystem and credential boundaries outside the agent rather than relying on model compliance. Independent workflow testing could info