Do not use separate Bots as a security boundary

ProblemThe natural assumption, repeated in otherwise careful tutorials, is that each Bot has its own computer.

TechniqueAssume every Bot on the account shares one machine: files, browser sessions, logins, command-line credentials, connectors and local-computer permission. Design as though any Bot can reach anything.

Why it worksEach user gets one Firecracker microVM; each Bot gets a screen on it, and screens are work surfaces rather than security boundaries.

When to useEvery security decision about this product.