Let people add useful tools without giving every tool access to their lives. You will build the isolation around models, plugins and remote jobs.
Not open yet: Pilot expansion
This work starts when that stage arrives, so there is no application to submit today and we will not pretend otherwise. What is written below is what the role is for and what would make somebody right for it, published early on purpose so you can decide whether it is worth watching.
The work
Evaluate processes, containers, virtual machines and capability-based restrictions against the actual threat model. Implement filesystem and network boundaries, resource quotas and safe lifecycle management. Work with security researchers to test escapes and confused-deputy behavior.
The milestone
In your first 90 days, deliver an isolated tool runner with explicit permissions, reproducible attack tests and measured startup and memory costs.
Evidence
Bring experience with kernel isolation, hypervisors or hardened execution environments. Understand the difference between restricting a process and protecting against a compromised host.
Evidence, not credentials. We are describing work you can point at, in whatever form it exists.
The exercise
Design a document-conversion sandbox that handles malicious files while preventing credential access and unintended network use.