41:I[185,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"SendEmailButton"] 43:I[63625,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"AddToLibraryButton"] 44:I[29721,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"ShareButton"] 45:I[58016,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"ProcessEpisodeButton"] 46:I[45269,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"SignupCTA"] 3b:["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 font-mono text-[12px] uppercase tracking-[0.1em] text-[color:var(--fg-3)]","children":[["$","time",null,{"dateTime":"2026-08-03T22:00:00.000Z","children":"August 3, 2026"}],["$","span",null,{"aria-hidden":true,"children":"·"}],["$","span",null,{"children":"00:11:07"}],false]}] 42:T4e5,Most builders think about agent security as a permissions problem: approve the right tools, deny the dangerous ones, and you are safe. But the sandbox escape testing that goes into a coding agent reveals a different picture, the real attack surface is the content the agent reads, not the commands it runs. This episode looks at what those tests actually probe, why prompt injection through files and web pages is the harder problem, and what that means for anyone running an agent against a real codebase.

Produced by VoxCrea.AI

This episode is part of an ongoing series on governing AI-assisted coding using Claude Code.

👉 Each episode has a companion article — breaking down the key ideas in a clearer, more structured way.
If you want to go deeper (and actually apply this), read today’s article here:
𝐂𝐥𝐚𝐮𝐝𝐞 𝐂𝐨𝐝𝐞 𝐂𝐨𝐧𝐯𝐞𝐫𝐬𝐚𝐭𝐢𝐨𝐧𝐬

At aijoe.ai, we build AI-powered systems like the ones discussed in this series.
If you’re ready to turn an idea into a working application, we’d be glad to help.