Bruce Schneier shared a shot judgement and a third-party article four weeks ago:

> (Title:) Using a VM to Contain an AI Agent (Opening:) It won’t work

> https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyb...