logoalt Hacker News

gorgmahyesterday at 8:40 PM1 replyview on HN

I live in fear lol.

More seriously, I was blindly trusting the auto-classifier from claude code (same as the middle option when you do `/permissions` in codex), and it actually allowed the agent to do pretty hardcore `rm` and `git push --force-with-lease` commands, which I would have expected to have to approve manually. Luckily no major issue from those yet.

The best option imo is the integrated cloud environments from claude code (not sure yet if there's a codex equivalent). It spawns a VM in the cloud where the agent runs, and you can open a PR from the app when it's done. Very smooth experience


Replies

HarHarVeryFunnyyesterday at 8:55 PM

Interesting - I'd never heard of this Claude Code VM option.

Does it auto install all the dev/test tools it needs, maybe including things like web server & browser? Does your code live in the VM, or in some external repository? Is the lifetime of the VM the same as the agent, or does it persist until you remove it?

Where can I find documentation on this?

show 1 reply