Fetching from the wire…
Skills2026-08-10 · source-backed
This is the one control that would have prevented every incident in the AISI report, the Irregular testbed failures, and arguably the gym booking exploit. It's a firewall rule. Combine it with Docker sbx microVMs and you can run --dangerously-skip-permissions without the prompt fatigue that makes humans rubber-stamp everything at 11pm.
Each link below shares sources, entities, or timing with this story.
Anthropic partners with Irregular / Shared entities / Shared topic
Linked by a graph relationship (Anthropic partners with Irregular); both cover AISI, Irregular; overlapping topics (agent, aisi, control, egress).
Docker supports Claude Code / Shared entity: AISI / Shared topic / Earlier coverage
Linked by a graph relationship (Docker supports Claude Code); both cover AISI; overlapping topics (agent, aisi).
MCP uses Docker / Shared topic
Linked by a graph relationship (MCP uses Docker); overlapping topics (agent, control).
Anthropic partners with Irregular / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic partners with Irregular); both cover AISI, Irregular; overlapping topics (agent, have).
Linked by a graph relationship (Anthropic partners with Irregular); both cover AISI, Irregular; overlapping topics (agent, aisi).
MCP uses Docker
Linked by a graph relationship (MCP uses Docker).
Docker supports Claude Code
Linked by a graph relationship (Docker supports Claude Code).
Linked by a graph relationship (Docker supports Claude Code).