Windsurf / Cascade
noneide-extensionRuns local commands with your full privileges, gated only by approval prompts; strong isolation is a separate cloud product.
documentedWindsurf/Cascade terminal docs ↗
No OS-level isolation. This agent runs commands with your full user privileges. Its guardrails (approval prompts, allowlists) live inside your trust boundary, wrap it in a boundary you control.
Windsurf/Cascade runs local commands with your full user privileges, gated only by approval prompts, and has no local OS sandbox. Its real-isolation story is a separate cloud product, Devin cloud VMs, following Cognition's acquisition.