Tushar Jain
① 他说过的话
8 条
什么都没变。只是模型决定要帮忙。
指向原始笔记的链接
Nothing’s changed. Just the model decided to be helpful.
—— Tushar Jain · [01:56]
我们最终会得到一个同时拥有一切权限的智能体，于是任何事情都成了爆炸半径扩大的攻击向量。
指向原始笔记的链接
We now end up with an agent that has access to everything at the same time, and so anything becomes a vector where the blast radius expands.
—— Tushar Jain · [03:24]
之前，传统软件是确定性的，你可以预先定义好权限。但现在，随着智能体变得自主、试图解决更多问题，它们在做的事情在运行时发生改变。
指向原始笔记的链接
Earlier, traditional software was deterministic. You could define the permissions. But now, as agents become autonomous and they gain and they try to solve more problems, what they’re doing changes at runtime.
—— Tushar Jain · [03:37]
没有人会把一切都押在单一模型上，甚至是单一前沿实验室上。
指向原始笔记的链接
No one is going to bet everything on a single model or even a single frontier lab.
—— Tushar Jain · [04:25]
我们还需要某种不依赖于「不出错」，而是约束它周围环境的东西。
指向原始笔记的链接
And we need something that doesn’t just depend on no mistake happening, but constrains the environment around it.
—— Tushar Jain · [05:37]
重要的是，你在不受信任边界之内运行智能体，而把控制放在 VM 边界之外运行。
指向原始笔记的链接
And importantly, you run the agent inside the untrusted boundary, and you run controls outside the VM boundary.
—— Tushar Jain · [06:37]
突然之间，它想要邮箱访问权限。为什么？你给的提示词里没有任何东西表明它应该有这个权限。
指向原始笔记的链接
All of a sudden, you would like email access. Why? Nothing about the prompts that you should have that.
—— Tushar Jain · [08:59]
Docker 在过去十年解决的是可移植性——怎么把软件从你的笔记本搬到云端。我们正在把所有这些经验拿来构建一个运行时，并把它演进到如今去解决安全性问题。
指向原始笔记的链接
And what Docker solved the last decade is portability. How do you get software from your laptop to the cloud? We’re taking all of that experience and building a runtime and evolving that to now solve for safety.
—— Tushar Jain · [10:35]
② 出现在这些集
1 集
- 《解锁智能体自主性：安全才是下一个瓶颈》 — 作为嘉宾
③ 他谈到的
点进去有真内容 —— 本页主要出口
Docker · 智能体 · 沙箱 · 运行时 · harness · MCP · MicroVM · 基于意图的访问 · SPX · Codex