I don't get it, it looks like they are copying data to the sandbox filesystem why would that impact production data? Because the agent can re-upload the file to s3?
That's exactly how I tried to address that problem with https://github.com/afshinm/zerobox -- you control what network access (e.g. `--deny-net *.amazonaws.com`) your agent has and you also get snapshotting out of the box.
That said, using LakeFS is probably a better long term solution and I like this approach.
Good question - the filesystem is Fuse-mounted into the sandbox, not copied into it. This way agents can modify data directly simply by interacting with the "local" files.
Calling the old PA-led status quo “far better” ignores how dysfunctional and destructive it was. The PA was given territory, money, and international legitimacy after Oslo, yet instead of building a transparent, functioning state, it became notorious for corruption, power struggles, and failing to deliver basic services. Worse, during that same period, suicide bombings and the Second Intifada erupted under its watch, so for ordinary Israelis, that “status quo” meant buses, cafes, and markets being blown up.
Even for Palestinians, the PA’s rule was hardly a path to peace or progress. Billions in foreign aid were stolen by elites, elections were canceled, dissent was crushed, and everyday life was marked by both authoritarianism and insecurity. So while today’s Hamas reality is undeniably worse, pretending the old PA era was some kind of lost golden path to peace overlooks that it was already a dead end for both peoples.
