Runs in its own container with its own volumes. The filesystem it sees is not the host's.
👤
One Seat
ttyd --max-clients 1. A single viewer at a time, so two people never fight over one keyboard.
🛡
Scoped by Design
On a bridge network with no reach into any platform container. Blast radius is the box it lives in.
Sandboxed. This lane runs inside a container.
The filesystem it sees is not the host's, and what it can reach is bounded by that container.
⚠ CLUSTER CONNECTION — CLEARANCE NOT GRANTED.
This device is not on the Kytran mesh, so Codex cannot be reached from here.
Connect to the tailnet and reload — signing in alone will not help.