Security model

Updated Jul 27, 2026

Podbot's security model is based on capability-based containment:

  1. Host socket isolation: The Rust command-line interface (CLI) holds the host Podman/Docker socket. The agent container never receives access to this socket.

  2. Nested containers: The agent container can run an inner Podman service for any nested container operations, isolated from the host.

  3. Filesystem capabilities: The cap-std crate provides capabilities- oriented filesystem access, preventing path traversal attacks.

  4. Credential injection: Host credentials (Claude, Codex) are copied into the container at startup rather than mounted, preventing runtime credential exfiltration.