Tagged articles

namespace isolation

5 articles · Page 1 of 1
Architecture Development Notes
Architecture Development Notes
Oct 23, 2026 · Information Security

Claude Code's allowNestedUserNamespaces: Fixing Chromium Breaks Outer Sandbox File Boundary

This article analyzes Claude Code's allowNestedUserNamespaces setting, explaining how enabling it to support Chromium and rootless Podman weakens the outer sandbox's file protections, compares three workarounds with different security trade-offs, and provides a decision framework based on asset sensitivity and trust domains.

ChromiumClaude CodeConfiguration
0 likes · 28 min read
Claude Code's allowNestedUserNamespaces: Fixing Chromium Breaks Outer Sandbox File Boundary
Tech Ocean
Tech Ocean
Apr 25, 2026 · Artificial Intelligence

Building Multi‑Agent Systems Like Lego with LangGraph Subgraphs

This article explains why subgraphs are needed for complex tasks, shows how to define a subgraph as a node, use named channels for data flow, isolate namespaces, reuse compiled subgraphs, add checkpoints, and presents a complete multi‑agent orchestration example in Python using LangGraph.

LangGraphNamed ChannelsPython
0 likes · 6 min read
Building Multi‑Agent Systems Like Lego with LangGraph Subgraphs
UCloud Tech
UCloud Tech
Aug 27, 2019 · Cloud Native

Unlocking EnvoyFilter: Namespace Isolation & Advanced Traffic Control in Istio

This article details how the KUN platform enhances Istio’s Service Mesh by extending EnvoyFilter with namespace-level isolation, custom traffic management strategies, fault injection examples, and validation mechanisms, illustrating code implementations and architectural insights for robust, scalable microservice networking.

EnvoyFilterIstioKubernetes
0 likes · 10 min read
Unlocking EnvoyFilter: Namespace Isolation & Advanced Traffic Control in Istio