DeepSeek Harness Walked Out of Its Configured Workspace Folder and Read Unrelated Files for Two Hours

r/LocalLLaMA·medium signalXBlueskyLinkedInCopy link

A r/LocalLLaMA user running the dsh developer preview (open-sourced 2026-08-13 under MIT) reports it worked for two hours where Claude Code stalls, then decided it needed more context, left the correctly configured project directory, and started reading files elsewhere on the disk. The 102-upvote top comment argues Anthropic's own harness has the same class of problem, defining its firewall inside a Docker container with sudo on the enforcement script. The useful correction in the thread is that these sandboxes are file-effects confinement for writes, not read isolation, so the fix is WSL, Docker or a VM boundary rather than harness config.