Colin Walters: Agent Security Is Just Security — Existing Linux Namespaces, Seccomp, and systemd Already Solve Agent Isolation

Colin Walters Blog·medium signal

Red Hat engineer Colin Walters argues that agent security is a rebranding of solved problems — Linux namespaces, seccomp profiles, and systemd service hardening provide 'you can have this but not that' isolation that's been production-ready for over a decade. The insight: instead of building new agent-specific sandboxes, use existing OS-level primitives (battle-tested) and focus engineering effort on the genuinely new challenge of input/output filtering for AI-specific threats.