Anthropic:用 containment 限制 Agent 爆炸半径Containment Caps The Agent Blast Radius
Anthropic 回顾 claude.ai、Claude Code 与 Cowork 的隔离架构:仅靠逐次审批会造成 approval fatigue,遥测中用户批准约 93% 的提示;更可靠的方法是通过 sandbox、VM、文件系统边界与 egress control 限制 agent 实际能触达的环境。
Anthropic reviews containment across claude.ai, Claude Code, and Cowork. Per-action approval creates fatigue—users approved about 93% of prompts—so sandboxes, VMs, filesystem boundaries, and egress controls must cap what agents can actually reach.