miniblog.

I find it odd that people recommend Docker for sandboxing agentic coding tools. Isn't it easier to just create a separate user account on the machine? It's an established security boundary, and viewing output is easy (just make the user's home directory world readable).

There are *so many* ways that reading a text file can fail. Maybe it doesn't exist, it's a broken symlink, it's actually a directory, it's not the encoding you expected, or perhaps you just don't have the correct permissions. Reporting good errors is surprisingly labour intensive.

I'm experimenting with Atuin for searching my terminal history: https://atuin.sh/ Previously I'd just used fzf to find items, which does work nicely. Occasionally I *really* want to search "commands which were run in this directory" though, which Atuin offers.