COI

Summary from the TLDR InfoSec newsletter

Coi protects host credentials and files by isolating AI coding agents such as Claude Code or Codex inside Linux system containers during autonomous sessions. The open-source tool uses Incus, a lightweight LXD fork, to grant root access, systemd, and native Docker, alongside kernel-level threat detection that automatically pauses or kills compromised containers.