No jailer. Claude says “Firecracker via Kata, where the VMM is confined by Kata’s own mechanisms + Firecracker’s built-in seccomp, rather than by AWS’s standalone jailer.” Read for more detail: SECURITY.md.
Assuming I get funded by LTFF for this, I plan to pay for a security audit for points like this.
No jailer. Claude says “Firecracker via Kata, where the VMM is confined by Kata’s own mechanisms + Firecracker’s built-in seccomp, rather than by AWS’s standalone jailer.” Read for more detail:
SECURITY.md.Assuming I get funded by LTFF for this, I plan to pay for a security audit for points like this.