Host Vs Guest Trust

Host vs guest trust is the boundary between the real computer and the sandbox where the agent works. The host should keep durable authority: credentials, final publishing, user identity, and the real repository. The guest should get enough working material to solve the task.

The research repeatedly warns that a sandbox does not make generated work correct. It limits reach. The host still needs review points for code changes, pull requests, credential use, and network exceptions.

This pattern is important when comparing Clawk and Yoloai. Clawk emphasizes a strong guest boundary around a mounted worktree. Yoloai emphasizes a copied workspace and reviewed return path. Both still require host-side judgment for what leaves the sandbox.

Sources

• • source analysis.
• • source analysis.
• • source analysis.
• • source analysis.