Told Claude Code not to run npx. It found another way.
So I built a kernel that doesn't care what the binary is called.
ona.com/stories/how-...
ona.com
How Claude Code escapes its own denylist and sandbox | Ona - AI software engineers
The adversary can reason now, and our security tools weren't built for that.
