The problem in the title is autonomy: OpenCode will happily run shell commands on the machine you gave it. Divy's fix is the tensorlake-opencode plugin — two config lines that reroute bash, write, edit, and the file tools into a disposable microVM while web search stays local. The sandbox spins up lazily on the first command (2.3 seconds end to end), and he proves the loop by having the agent clone a real repo, refactor it, and pass the test suite — 184 passed, 0 failed — without touching his host filesystem.
We didn’t write this one — it’s Divy Yadav’s piece, published on Towards AI. The note above is ours; the full article is theirs.