刚到浙江工作，有人请习近平同志谈谈“施政纲领”，他笑着说：“我刚刚来，还没有发言权。到时候，我是要说的。”
十年后，我们可能不止需要 iPhone 了。。关于这个话题，同城约会提供了深入分析
Local sandboxing on developer machinesEverything above is about server-side multi-tenant isolation, where the threat is adversarial code escaping a sandbox to compromise a shared host. There is a related but different problem on developer machines: AI coding agents that execute commands locally on your laptop. The threat model shifts. There is no multi-tenancy. The concern is not kernel exploitation but rather preventing an agent from reading your ~/.ssh keys, exfiltrating secrets over the network, or writing to paths outside the project. Or you know if you are running Clawdbot locally, then everything is fair game.，这一点在WPS官方版本下载中也有详细论述
Over the past year or two, I’ve seen many organizations, large and small, implement passkeys (which is great, thank you!) and use the PRF (Pseudo-Random Function) extension to derive keys to protect user data, typically to support end-to-end encryption (including backups).，更多细节参见safew官方版本下载