The package you don't trust runs in a container with no AI

A new dependency wants to run a postinstall script. You'd rather not find out what it does next to a credential.

Create a container with --no-ai, or PATCH /api/v1/containers/{id} with {"ai": false} on one you already have. Install the package there. Even if it greps the environment for anything that looks like a key, there isn't one: AI auth on Hoody is container identity, resolved by the gateway on your host, and this container's identity is switched off. The exfiltration script finds a filesystem and nothing worth sending.

When you're satisfied, delete the container or flip ai back to true. The quarantine cost one boolean.