Docker

Everything Fervor AI has published that touches Docker — 2 pieces, newest first.

• Docker Agent Lets You Pull an AI Agent Like an Image. Its Docs Say Not to Trust It Like One

  Docker Agent lets anyone run an AI agent straight from an OCI registry, but its own docs call permissions client-side and not a security boundary for untrusted agents,…

• Omarchy Spent Fifteen Months Putting Every Desktop Process One Command Away From Root

  Your agent's blast radius is set by the Unix groups your login shell inherited, not by the permission settings in its harness, and Omarchy's docker group default made…