Comment by hmokiguess

2 hours ago

but they are in control of the harness and could pay closer attention to where tokens leak on suboptimal turns there

What makes you think they aren't doing that?

You don't want to ban the model from running sudo. I have Claude working in a VM where it has (and needs) free rein, including sudo.