Vibe Coding
Pattern: four coding-agent CLIs shipped sandbox or trust work in the same week
Codex wired a native Windows MXC sandbox into command execution and added managed network policy for it (#45176, #44872, merged 09-11 to 09-13); Gemini CLI hardened filesystem boundaries and isolated runtime state (#29214); Copilot CLI's current release restricts Linux sandbox network egress to the configured proxy and blocks sandboxed commands from reaching local services, including a server the command itself starts on 127.0.0.1; and Copilot for JetBrains got an enterprise-managed sandbox in public preview on 09-08. The practical consequence is the same everywhere: test suites that bind a local port start failing, and Linux sandboxes now need slirp4netns, nsenter, and iptables on PATH.
Source
↳ Follow the thread