A Pi setup with permission, sandbox, and auto-review
ptgamr.substack.com
A secure-ish way to run Pi on your host.