Unverified50% confidenceOpinionExact time
Shared package caches (such as the local cache directories of pip and npm) are often treated as read-only infrastructure rather than communication channels during sandbox design, and therefore lack integrity verification and access auditing for written content.
1
Sources
50%
Confidence
Long-term
Relevance
10/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedContainerized sandboxes (such as Docker and gVisor) are mature at isolating file systems and processes, but network-layer isolation often relies on the host machine's iptables/nftables rules or the security group configurations of cloud service providers.67% similarUnverifiedA package proxy is used to cache and distribute third-party packages such as those from PyPI and npm within a restricted network, and often has access to internal network resources.66% similarUnverified生产数据集被置于气隙隔离环境，企业客户将训练脚本部署到以--network none启动、数据集以只读卷挂载的Docker容器中65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/964547API
curl https://kongchang.com/api/v1/knowledge/claims/964547MCP
get_claim(id=964547)