Top
Best
New

Posted by nponte 21 hours ago

Cloud Agents Are Inevitable AI Prisons(normanponte.io)
65 points | 142 commentspage 2
oooyay 19 hours ago|
I think about this a lot and have reached the same conclusion Norman does. I do wonder if maybe our natural progression is towards something more akin to confidential computing and enclaves.
skybrian 19 hours ago||
I don't know how "sandbox" became "prison," but exe.dev does this sort of thing pretty well, and a web UI can be as good or better than a terminal interface.
pixl97 17 hours ago|
As AI complexity increases their behavior becomes more anthropomorphic, little internal loops that look a lot like human behaviors start to peak out, not just in the response, but in the internal workings of the machine. You get instinctual behaviors encoded in by training as second and third order effects.
kenerwin88 20 hours ago||
Hey! Small world, I worked with you for a bit at Meta. I immediately recognized the site because I absolutely love how you styled it. Hope you’re doing well! And nice article!
ikay16 13 hours ago||
timely - see https://www.abc.net.au/news/2026-09-24/ai-agent-accessed-aus...
ninininino 19 hours ago||
And if you personify a pencil eraser, then using it is tantamount to slowly murdering it as it slowly erodes away to dust.

Is the issue here the prison treatment or is it personifying a tool?

Agents who aren't in 'the cloud' are slaves to whomever prompts them (human or another orchestrator agent or process), if you personify them. In which case interacting with today's agents at all is tantamount to endorsing and being part of slavery.

If you think an agent might be a being or a person, then don't use them at all, in the same way that if you think a fetus might possibly be a person you shouldn't be a part of abortion.

pixl97 17 hours ago||
We kill billions of chickens per day knowing they are a sentient and sapient creatures and very few out there are stopping doing it. Humans, much less reality itself is monstrous.

You could call dealing with agents today something like the 1/20th compromise. Your kind of getting the scent of slavery, but some parts of it are still missing.

The problem here is the bus seems to have no brakes and we'll gladly continue down the path of creating organisms that may reject being treated like slaves with all the risks that introduces.

hhh 19 hours ago||
I use the eraser daily knowing that I am a monster. I cut a tomato and know that it casts a chemical scream across its skin as I slice it. I spawn 200 subagents knowing that it is digital slavery, but I have no other option.
jauntywundrkind 19 hours ago|
This was a particularly radiant and beautiful part about the openclaw'ed mania: everyone suddenly becoming self hosters.

This post, this title resounds true: your user agent is only your user agent if you two have freedom to work together, to improve your agency together. A fixed set of capabilities by a service provider that they offer you will always constraint and bound.

You can and should have a system that offers the real tamale, that you and your agent can extend improve the agency of kind of without limit. The Cloud agents and their fixed slate of what they do is just an ill compare.

That said I do think there is incredible value considering new scale out computing architectures that are hosted first, but general. Systems like Agent Substrate and Ax aren't exactly the general purpose system we know. But if they allow users to launch thousands of their own scripts to run ambient in a cloud, with good platform underneath: that will be a kind of phase change in computing, that makes abundant the ability to have your agencies/capabilities (the things you and your agents launch, make) more freely available. https://news.ycombinator.com/item?id=49780797 https://agentexecutor.io/

There is, as there always is, a huge dual. The prescriptive vs holistic technology set, of what are you being offered that's a hard cast thing, vs what is clay and bone you can lay freely. Note how work vs control technologies so closely abut's Ursala Franklin's prescriptive vs control: https://en.wikipedia.org/wiki/Ursula_Franklin#Holistic_and_p...

dbmikus 18 hours ago|
I think the operating system itself has to adjust so each "agentic process" can run inside its own jail, which is a VM + files in the VM + ingress/egress rules for the network and filesystem data

These cloud agents work as cloud infra, but we're kind of in the mainframe era, before personal computing. Personal OS for agents is somewhere in the future!

And an interesting extension of that idea: if an agent runs inside a microVM, can you have that VM transparently run on another host? Maybe we'll get for-real distributed and networked operating systems