miniblog.

I find it odd that people recommend Docker for sandboxing agentic coding tools. Isn't it easier to just create a separate user account on the machine? It's an established security boundary, and viewing output is easy (just make the user's home directory world readable).

A fun example of Emacs composability: run spell check when you're viewing files, so you can fix typos in file names:

I created a patch to a typescript project today, but accidentally reformatted it. When viewing my changes with difftastic, I didn't see any of the formatting changes! This is kinda cool, but it would have annoyed the maintainer if I hadn't spotted it.